Add a trusted CA object

Add a trusted CA object so the system can validate certificates issued by a Certificate Authority (CA).

Use this task when you need to import a new trusted CA certificate into the system, such as when enabling secure communications or integrating with external certificate authorities.

Before you begin

  • Have the DER or PEM-encoded X.509 v3 CA certificate file available.

  • If the file is password-protected, ensure you have the password ready.

Procedure

Step 1

Choose Objects.

Step 2

Expand the PKI node, and choose Trusted CAs.

Step 3

Click Add Trusted CAs.

Step 4

Enter a Name.

Step 5

Click Browse to upload a DER or PEM-encoded X.509 v3 CA certificate file.

Step 6

If the file is password-protected, check the Encrypted, and the password is: check box, and enter the password.

Step 7

Click Save.

The trusted CA object is added and available for use in certificate validation processes.

What to do next

  • If an active policy references your object, deploy configuration changes.