Dynamic certificates for X.509 are produced by the PKI secrets engine. With this secrets engine, services can obtain certificates without going through the typical manual procedure of generating a private key and CSR, submitting to a Certificate Authority, and waiting for a verification and signing process to finish. The functionality for verification is provided by the internal authentication in Privileged Access Manager.
On the home page of Privileged Access Manager console, click Credential Vault.
Click Add +
Select Certificate Issuer > PKI.
In the General page, add the Domain name as PKI Resource and click Next.
In the Certificate Authority page, enter the following details:
Select Import to import the certificate
Enter the CA Certificate Name
Enter the Passphrase
Optionally add the Extended Attributes and the Reconcile Credential.
Add the attributes.