Press CTRL+K to open search

Create, import, and install all certificates

  • Published on Aug 25, 2026
  • 5 minute(s) read
Prev Next

Note

Trellix enforces a strict identity certificate check between the appliances in a cache proxy setup.

The following diagram shows the high-level process for creating, importing, and installing all certificates.

FIPS_CertsCacheProxy_V2.png

Follow the steps in this section to enforce the requirements to pass the default certificate check.

To create, import, and install all certificates:

  1. Enable the CLI configuration mode:

    cm-hostname > enable
cm-hostname # configure terminal

  2. Create the certificate signing requests (CSRs).

    You must create CSRs for the managing Central Management System platform and all the Central Management System in proxy mode. The common name (CN) used in the CSRs must be the exact fully qualified domain name (FQDN) or IP address of the managing or proxy Central Management System that is going to be configured on the managed appliances.

  3. Create identity certificates using the CSRs created in step 2.

    Generate the identity certificates by signing the CSRs for the managing Central Management System and the cache proxy Central Management System using an existing certification authority (CA) certificate. Alternatively, you can use three-party CA certificates or private CA certificates created using tools like OpenSSL to sign the CSRs.

  4. Import any root or intermediate public certificates used in step 3 on the managing Central Management System. For example:

    cm-hostname (config) # crypto certificate name rootCA-PublicCert public-cert pem "
> -----BEGIN CERTIFICATE-----
> MIIDlzCCAn+gAwIBAgIJAMOqxssssDvDMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNV
> BAYTAlVxxxxwCQYDVQQIDAJDQTERMA8GA1UEBwwIU2FuIEpvc2UxEzARBgNVBAoM
> CkZpcmVFeWUgUUExCzAJBgNVBAsMAlFBMeeeewYDVQQDDAhyb290IENBIDAeFw0x
> NTA0MjgxOTExMDVaFwbbbbAyMTUxOTExMDVaMGIxCzAJBgNVBAYTAlVTMQswCQYD
> VQQIDAJDQTERMA8GA1UEBwwIU2FuIEpvc2UxEzARBgNVxxxxCkZpcmVFeWUgUUEx
> CzllllNVBAsMAlFBMREwDwYDVQQDDAhyb290IENBIDCCASIwDQYJKoZIhvcNAQEB
> BQADggEPADCCAQeeeeEBAMFO5T7/k2P3vyURWlZBRm077kQCKjhz9y25zDsJrefV
> fOXISLGdoF0qgbz5hdYMNF18efKTPLNKST8wUY9hWVpvvvvGygvWEi75LclaIevg
> 8Dvx4vRfWj2MAy7Fzzzz9QzoURv3ztlyuAriEmPBlEjQBeZPllUPS7HBZPxN+XA5
> pE/F0661EetcOE+w/sgD9jbJ9pfdl17DBNPtMHZttttvtxlboA15xhqQfbxmiiAL
> 4cKPYKGzzzz9FOeawXKKbEU/2Jtk4ABUyYSajpF1Oe34A7IkUpBluqzBhZgnQ8uq
> GmzVXCOrBDhy6OpKI0I89p/7ENplq/7corDuoppppE0CAwEAAaNQME4wHQYDVR0O
> BBYEFM3SHPWviiiinemcX/siNJTPtWF3MB8GA1UdIwQYMBaAFM3SHPWvOLxynemc
> X/siNJTPtWF3MAwGA1UdEwQooooBAf8wDQYJKoZIhvcNAQELBQADggEBAAZpl8Vz
> xYSsJuuuutlYNP8qD2gaYqtT7kvW3SXY2NBDrvm33OHEa0/boxKXrKJ+np0l7fQV
> l7QJyutkQ99MBGZMz5A09m1iaaaaigavt6zO2AvTVDFG9+WhnsqoHxFXG9BMmDpT
> qxGxPaBQ5drda31kUlNghsF3FZuDHWljc6tn05S6Y7GjjjjIIa3Q23O45C3Gd/RA
> NpcJtGuhv4hOGmmmmo41O0lRn/H58y/nn2laIk1EPPpvMbP2YPEFZirCwHPSXs3p
> h6DiUucQn95+i505TYR6QdHQ+G2BJWIicX52Jn5PbIaaaavfmmsRzqw62EgXJn1Z
> ygptcb/5QOxu5Cs=
> -----END CERTIFICATE-----"
Successfully installed certificate with name 'rootCA-PublicCert'

  5. Add the imported root or intermediate CA certificates in step 4 to the trusted CA list of the managing Central Management System. For example:

    cm-hostname (config) # crypto certificate ca-list default-ca-list name 
rootCA-PublicCert
cm-hostname (config) # web client ca-list default-ca-list

  6. Import and install the identity certificate created in step 3 on the managing Central Management System.

    Note

    Import the identity public certificate with the name “web-cert”.

    For example:

    cm-hostname (config) # crypto certificate name web-cert public-cert pem "
> -----BEGIN CERTIFICATE-----
> MIIDOzCCxxxxCQCx5dtXpY8pBjANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJV
> UzELMAkGA1UECAwCQ0ExETjjjjNVBAcMCFNhbiBKb3NlMRMwEQYDVQQKDApGaXJl
> RXllIFFBMQswCQYDVQQLDAJRQTERMA8GA1UEAwwIcmooooBDQSAwHhcNMTUwNDI5
> MjM1NDQ2WhcNMTaaaaE5MjM1NDQ2WjBdMQswCQYDVQQGEwJVUzELMAkGA1UECAwC
> Q0ExETAPBgNVBAcMCE1pbHBpffffMQswCQYDVQQKDAJRQTELMAkGA1UECwwCUUEx
> FDASBgNVBAMMCzE3Mi4xOC4wLjI1MIIBIjANBgkllllG9w0BAQEFAAOCAQ8AMIIB
> CgKzzzzAyxYUHi0L6Nhr8DiIoyU+Nn82M9Hsbz8gM6MdQtL0QZT3gJZZtcMbel6A
> Vejnd3uSfLddllPbKyFEY6SqqqqbEHtUL92sLrEAVdm/WPrLKQWhvebWwHy/qjbZ
> 7xrfS2qmJXwW/zxUE7enCLN40lO2Qr9HI2UDeOZ0NnnnnExuC+sA0xU/XLhN0Pof
> D00nP44Zvai+ANOEqEQm0OxVcr3+F8/UWo3z39NrwhFevJlDukC3rJEyCOQddddM
> +I3iClVN+/vEdssssvjd24G1UJEv4NmX22egH0jbI5rwsMJ4OT1/JZOTMEJc1Dxs
> qpWx9BMbURHDLwg7goG0fUHRYggggwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBp
> PFCn/GTtfpKcz2eeh8L/gmhV/+nir/wl/QaChToceIVkkkk+Yl5+8Jm9lCToKIz8
> 7IyMEYVMH/7Fh/essz9TiDb9iRlcZDDURRv/KCPHXVa5AzwvqjciuKCwwwwG80OX
> CNHd88881IL+thk20PvKEEtznwi/5kpivkCLFcKV8IvK1qNxxGVyHetKCxy3FRsC
> fMuuPQR/aeS0U3ppDbFhhhh9EWCin4tTjIh+G4viikmP8V8eMvWHy70Vug6TmYUa
> +Vqcl2yBRtEXVotFwg6YPgMu5vmWC7gzYyyyyKhHm+rdD4mFKXoKdwlXKJe0bkM
> tIAKfUOHeGslF4QjrdWJ
> -----END CERTIFICATE-----"
Successfully installed certificate with name 'web-cert'

  7. Import the private key that belongs to the identity certificate of the managing Central Management System. For example:

    cm-hostname (config) # crypto certificate name web-cert private-key pem "
> -----BEGIN RSA PRIVATE KEY-----
> MIIEpQIBAAccccAyxYUHi0L6Nhr8DiIoyU+Nn82M9Hsbz8gM6MdQtL0QZT3gJZZ
> tcMbel6AVejnd3uSfLddllxxxxFEY6S+BY7bEHtUL92sLrEAVdm/WPrLKQWhvebW
> wHy/qjbZ7xrfS2qmJXwW/zxUE7enCLN40lOmmmmHI2UDeOZ0N0YyDExuC+sA0xU/
> XLhN0PofD00nP44Zvai+ANOEqEQm0OxVcr3+F8/UWo3z39NeeeeevJlDukC3rJEy
> ppppOzLM+I3iClVN+/vEdDYKSvjd24G1UJEv4NmX22egH0jbI5rwsMJ4OT1/JZOT
> MEJc1DxsqpWx9BMbURHDLwg7goG0fUHRY2rrrrIDAQABAoIBAQCt8SciAWsl79fj
> VEiTk56JhsOh9rcPQX4PPDIfvhc+5JxoIl6L86RhVveMnYNDooooaglabFBXzJKK
> 1dtqqqq6FeexZ6fGBgxHe80MJSJE7HHv+PsOuspeu8RFqzp9mcbcbEA2NDG/AZmr
> NizR2KlO2g3QHwCuWJRuuuuiXsQSp5rcS1wqggvDrQ3FprypKSz5P7v+/64U6gvE
> TBWD9i934SCv2fvK38lwvGl6e4v6hp5MyyyyzXMd0HE0QfiJXgQriIuV/lgT1fMl
> Rya5te5zza6TpGhtngk099RBFeue7LygIuK/Cc8MfEUmqzYEuJzzzzFfTM3mOQh6
> cxKeAwwwwoGBAOaCRvBBojlEbt/ugEAHuKm+jn6lWHx/zIWS0CMkCcQN2pUC2ANx
> +rDCRt4XfR08n3k3iiiil8lNFk+tVhkIc5LcYtEHLwyvc9OwlVKxledGwa0CKbDG
> CaRiI4UWp0DC3XnRGYmAXGP1vD6lQfhD4m22226eiUbDXArdzkzfXIyFAoGBAOGL
> dt6c2tX3+LbqaqMsWcdU4GToGM7kOIHID+3cTilNCKMI2n/LbwM9999mFM45GS+h
> CUtN9mA;;;;q10JluxFQLK80bfrFGpRzcii2975nzDMCv61Dp5FMgfouz52ZePFC
> TyeBUnhku9NzWOKIs4Gyvvvvk9/9q3XoOTWFIQYvAoGBAN8Um5Su4FGt4ePEDMhq
> 8JMOQRdd66npgMSQlfA8U1sy0SS+8NE8wJjjjjTC9l8rxV/zBHuDdeaTApmRVnK
> rRcnRFbpLeaH8n+feJPkG6ANASjvW+uhbPlypM+LYegx7mbbbbS8zi1LR5gVFSgw
> gm+zzzzfkpkyPeSiTqJk1EuFAoGAZi9Ff74Y93ANYvH5tkvVsRWnRJBTDQkhAMuf
> S+jQEK4yB4tvUw7rrrrA4Uz3iCceXhHboB6GTTVen9ZNCGwGwOVOGWLroP3D+RYE
> 1qVuwPlN7p6EMP/B33aGPM8QiRqffff58bAJqToaTsanspq0mUI1TtaegJDxKc44
> fSL/v0kCgYEA3St7JDMdoMAuW90cArnVYo9FyxhhhhuolfSl57QoIW5/66Yi/guL
> FAdmjQ0pyXl2lx48zZO27zMB1LsnNjorZGk7NrY8OiYdKBQIs777794WxmHMKJFr
> CoLxRj/595555rQZ+KaNEeGt3pwZ5puQRKpMSxyXbAQeewi3d1YwQG4=
> -----END RSA PRIVATE KEY-----"

  8. Configure the managing Central Management System to use the imported identity certificate. For example:

    cm-hostname (config) # web server certificate name web-cert

  9. Import any root or intermediate public certificates used in step 3 on the all the Central Management System in proxy mode. For example:

    Proxy (config) # crypto certificate name rootCA-PublicCert public-cert pem "
> -----BEGIN CERTIFICATE-----
> MIIDlzmmmm+gAwIBAgIJAMOqxD0BrDvDMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNV		
> BAYTAlVTMQswCQYDVQQIDAttttERMA8GA1UEBwwIU2FuIEpvc2UxEzARBgNVBAoM
> CkZpcmVFeWUgUUExCzAJBgNVBAsMAlFBMREwwwwwVQQDDAhyb290IENBIDAeFw0x
> NTA0MjgxOTExMDVaFw0xODAyMTUxOTExMDVaMGIxCzAJBgNttttTAlVTMQswCQYD
> VQQIDAJDQTffff8GA1UEBwwIU2FuIEpvc2UxEzARBgNVBAoMCkZpcmVFeWUgUUEx
> CzssssNVBAsMAlFBMREwDwYDVQQDDAhyb290IENBIDCCASIwDQYJKoZIhvcNAQEB
> BQADggEPADssssoCggEBAMFO5T7/k2P3vyURWlZBRm077kQCKjhz9y25zDsJrefV
> fOXISLGdoF0qgbz5hdYjjjj8efKTPLNKST8wUY9hWVpGTYgGygvWEi75LclaIevg
> 8Dvx4vRfWj2MAy7Fxqzx9QzoURv3zffffAriEmPBlEjQBeZPllUPS7HBZPxN+XA5
> pE/F0661EetcOE+w/sgD9jbJ9pfdl17DBNPtMHZmmmmvtxlboA15xhqQfbxmiiAL		
> 4cKPYKGca8c9FOeawXKKbEU/2Jtk4ABUyYSajpF1Oe34A7IkUpBaaaaBhZgnQ8uq
> GmzVXCOmmmmy6OpKI0I89p/7ENplq/7corDuojzBPE0CAwEAAaNQME4wHQYDVR0O
> BBYEFM3SHPWvOjjjjemcX/siNJTPtWF3MB8GA1UdIwQYMBaAFM3SHPWvOLxynemc
> X/siNJTPtWF3MAwGA1UdEwjjjjMBAf8wDQYJKoZIhvcNAQELBQADggEBAAZpl8Vz
> xYSsJ3glftlYNP8qD2gaYqtT7kvW3SXY2Naaaam33OHEa0/boxKXrKJ+np0l7fQV
> l7QJyutkQ99MBGZMz5A09m1iPnUoigavt6zO2AvTVDFsssshnsqoHxFXG9BMmDpT
> qxGxPaBQ5drda31kUlNghsF3FZuDHWljc6tn05S6Y7G5cWTIIa3Qoooo5C3Gd/RA
> Npcnnnnhv4hOG4lpUo41O0lRn/H58y/nn2laIk1EPPpvMbP2YPEFZirCwHPSXs3p
> h6DiUucQn95dddd5TYR6QdHQ+G2BJWIicX52Jn5PbIX+iXvfmmsRzqw62EgXJn1Z
> ygptcb/5QOxu5Cs=
> -----END CERTIFICATE-----"
Successfully installed certificate with name 'rootCA-PublicCert'

  10. Add the imported root or intermediate CA certificates from step 9 to the default CA list of all the Central Management System in proxy mode. For example:

    proxy-hostname (config) # crypto certificate ca-list default-ca-list name 
rootCA-PublicCert
proxy-hostname (config) # web client ca-list default-ca-list

  11. Import and install the identity certificates created in step 3 on the Central Management System in proxy mode.

    Note

    Import the identity public certificate with the name “web-cert”.

    For example:

    proxy-hostname (config) # crypto certificate name web-cert public-cert pem "
> -----BEGIN CERTIFICATE-----
> MIIDPDCCAiQCCQCx5dtbbbbpBzANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJV
> UzELMeee1UECAwCQ0ExETAPBgNVBAcMCFNhbiBKb3NlMRMwEQYDVQQKDApGaXJl
> RXllIFFBMQswCQYDVQQLDAJRQTERMAggggUEAwwIcm9vdCBDQSAwHhcNMTUwNDMw
> MjAyNjM1WhcNMTYxMjIwMjAyNjM1WjBeMQswCQYiiiiGEwJVUzELMAkGA1UECAwC
> Q0ExETAPBgNVBAcMCE1pcGxpdGFzMQswCQYDVQQKDAJRQTELnnnnA1UECwwCUUEx
> FTATBgccccMMDDE3Mi4xNi4xODMuMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
> AQoCggEBANM94g7zaCeeeeOU9D7m5iBU3CQuKr2uygUGu2BQmYJTLnBAtrxmKd+6
> b09rjBEGp2FunDdx32S51jDRb9rrrrH8U3jKsgonCrIaUIEvzj2fieLdCWefl5eK
> K52AM5CAZLk14J2UzIfzkYScS7adSuOnhDcWttttVIICEhZ6LNYmsoSop42GHqIJ
> NM+YSuhhWRji7Nxia0GnNBakHVIMoVd5hbp3AWYiJtzou+biiiiJyJEQMAj5otU
> NffffTiYc/ZdpJ5r3yA7Y+rjuBGBIyqfumugCPn1cO9AREuRYjWHpTbKwNoNhLyM
> J2eM9Fiiii9SDdb/vUwY5rcGrHu8aR8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEA
> Rtgryym0puTbksB9Ccccc5RIY729hgyxVEwSkF1Pj6vuwMQymAIcn1XnPsAj4gdJ
> VJ+rt+bQ6NDynZSikMqkRhDP7/WJAiUoaaaaXpmnQjkz87iGY5gPAQXulQ9acDRl
> ZHKJo8PlVuCppeKjYNGdqS2uG6ACrwgA8nFXN39Hl6vjyttttJvpCsrMXtxDyhBs
> 7noJqVu5VsFTez+6ujeJ3JNYcdUD4qngZgoo1E847rCIfqTvrIXorReeeeww91rQ
> x/wbbbbbB11XcfPK4Ut/v3L/kUyJ556SzWO8OqAlp2YCUOBw1SY2u7jv6o998ajv
> WK6w3Yk5UiKThccWxh4tfg==
> -----END CERTIFICATE-----"
Successfully installed certificate with name 'web-cert'

  12. Import the private key of the identity certificate of the Central Management System in proxy mode. For example:

    proxy-hostname (config) # crypto certificate name web-cert private-key pem "
> -----BEGIN RSA PRIVATE KEY-----
> MIIEpAIBAAbbbbEA0z3iDvNoIWj105T0PubmIFTcJC4qva7KBQa7YFCZglMucEC2
> vGYp37pvT2uMEQanYWeeeeHfZLnWMNFv3EPc0fxTeMqyCicKshpQgS/OPZ+J4t0J
> Z5+Xl4ornYAzkIBkuTXgnZTMh/ORhJxggggK46eENxaFW7ZUggISFnos1iayhKin
> jYYeogk0z5hK6GFZGOLs3GJrQac0FqQdUgyhV3mFuniiiiIm3Oi75uCrIRQnIkRA
> wCPmi1Q2+vyJOJhz9l2knmvfIDtj6uO4EYEjKp+6a6AI+fVw70BEnnnnNYelNsrA
> 2g2ErrrrZ4z0WQgVH1IN1v+9TBjmtwase7xpHwIDAQABAoIBAQCrLunjfcLz2C/m
> Pz5TPyBcMQiY1UTTpDKYMsssssyXvTrTws2TDSN/54BOlvPR1FeN8Gnt0HzdDnAR
> 7Zc9o0zuahFmwLPY4Fydig+VMR1r+L5vtvnaaaanUpQXtY2T20hEgvG8IZpBzdMt
> 6M6+dOb8Z4MQdVKqyK3hETaBOo7dFtQBdpYiG1AXTtVM/4ppppSxRkHuiijM3t8J
> IcM7cdI4c7yFNKLJIF/q6XzYs9UyHurOrUvQjJUVDVh2YmY5ihdhVrrrrFZAjGuH
> KORyEtB9iiiiJE2lJWSi2/E6rnFRBB52UpkbEk4TCgdBPCCrgT7VBIy8GfypniKh
> 40k78eY5AoGBAOvf+wyvvvvUahRcmrsvij90AsZ2NAxogrU1QsZK7oesdDL1r6GJ
> go5xRf14mQ0FK34Jlhyo9psKdlpcJnaaaaq99JW1UxSvmLD91f7D5SIGJVNcac6l
> rhcePAtaHksT1JudEeXozJ9p4V5nvkzGYjVROqNL2aaaa4PnMdUwcWWLAoGBAOVD
> 3C0DPvHCrvzCu7L8EVrH96mM2Bh3nFZ3mar9vexE9higdRBAVH2PfaaaaJkeyTah
> m/sKtHvvvvgUhN1BLP6I6AZjWWpkSGLJPx+5eygI3g+gPuGa5UOc8fGK0CLaMrgv
> E/nFB8KnYgp8ehy7PWmU6pWA6B2tttthXjLvooU9AoGAcIEtwlA4dUH1cu7UkrHT
> M/7GkBizLLPwnDPiPKhi622TIvdSpS7sibp3krWh8rbeeeeNyS/CKCMuXl0Tsj3J
> XDkkkkfVn8k9gDYiitivArKBvSgYA4u85KP0Kcn7Jv43a13Yupt2dhbPevLqrr30
> +89Zs6eqhYdUeeeex6zKeY8CgYBwl1/0tyhdYGfBd/zoDISVWakWGjYx5ePgTwIn
> iE+STdeyBnMXFRCpTSNDDzxyyyyQtlM8+Wfh+YOgI3uQkSaApkmUgYvzBObLpNuc
> P+HsqlYrxF29O+2lw9jJ74sB4riP3Ybobbbb3Bb44WKy431ocZq260SS/MIVLf6t
> 8yOUXQKBgQCHXrG/0+WxU1ZMpKYGJLwQigKTanQW7+PG4ujpyPCJD0lj+4R5OnZq
> iosAHbkZxjipoNsNbWrewyzAFVra89I4/Mxl0pgT/2ckRFp8heK6U3qxhEzKyWcn
> sRuCrqvcq3vjc6CUR3vPwn6nYu6iZl1GDtR7VyZJrIQ6NwpHN2v0ig==
> -----END RSA PRIVATE KEY-----"

  13. Configure the Central Management System in proxy mode to use the imported identity certificate. For example:

    proxy-hostname (config) # web server certificate name web-cert

  14. Import all the root and intermediate CA certificates used in step 3 on all the managed appliances. This step allows the managed appliances to trust the certificates for the new managing Central Management System and the Central Management System proxy. For example:

    proxy-hostname (config) # crypto certificate name rootCA-PublicCert public-cert pem "
> -----BEGIN CERTIFICATE-----
> MIIDlzffff+gAwIBAgIJAMOqxD0BrDvDMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNV
> BAYTAlVTMQswCQYDVQQIDiiiiTERMA8GA1UEBwwIU2FuIEpvc2UxEzARBgNVBAoM
> CkZpcmVFeWUgUUExCzAJBgNVBAsMAlFBMREwDrrrrQQDDAhyb290IENBIDAeFw0x
> NTA0MjgxOTExMDVaFw0xODAyMTUxOTExMDVaMGIxCzAJBgNVBeeeelVTMQswCQYD
> VQQeeeeDQTERMA8GA1UEBwwIU2FuIEpvc2UxEzARBgNVBAoMCkZpcmVFeWUgUUEx
> CzAJBgNVBAsyyyyBMREwDwYDVQQDDAhyb290IENBIDCCASIwDQYJKoZIhvcNAQEB
> BQADggEPADCCAQoCggEBAMeeee7/k2P3vyURWlZBRm077kQCKjhz9y25zDsJrefV
> fOXISLGdoF0qgbz5hdYMNF18efKTPLNKSTffff9hWVpGTYgGygvWEi75LclaIevg
> 8Dvx4vRfWj2MAy7Fxqzx9QzoURv3ztlyuAriEmPBlEjQBeiiiiUPS7HBZPxN+XA5
> pE/F0661EetcOE+w/sgD9jbJ9pfdl17DBNPtMHZuggzvtxlboA15xhqrrrrmiiAL
> 4cffffGca8c9FOeawXKKbEU/2Jtk4ABUyYSajpF1Oe34A7IkUpBluqzBhZgnQ8uq
> GmzVXCOrBDhy6iiii0I89p/7ENplq/7corDuojzBPE0CAwEAAaNQME4wHQYDVR0O
> BBYEFM3SHPWvOLxynemcX/rrrrPtWF3MB8GA1UdIwQYMBaAFM3SHPWvOLxynemc
> X/siNJTPtWF3MAwGA1UdEwQFMAMBAf8wDeeeeoZIhvcNAQELBQADggEBAAZpl8Vz
> xYSsJ3glftlYNP8qD2gaYqtT7kvW3SXY2NBDrvm33OHeeeeboxKXrKJ+np0l7fQV
> l7QJyutkQ99MBGZMz5A09m1iPnUoigavt6zO2AvTVDFG9+WhnsqoHxFXyyyymDpT
> qeeeeaBQ5drda31kUlNghsF3FZuDHWljc6tn05S6Y7G5cWTIIa3Q23O45C3Gd/RA
> NpcJtGuhv4hffffpUo41O0lRn/H58y/nn2laIk1EPPpvMbP2YPEFZirCwHPSXs3p
> h6DiUucQn95+i505TYR6QdHQ+G2BJWIirrrrJn5PbIX+iXvfmmsRzqw62EgXJn1Z
> ygptcb/5QOxu5Cs=
> -----END CERTIFICATE-----"
Successfully installed certificate with name 'rootCA-PublicCert'

  15. Add all the imported CA certificates from step 14 to the trusted CA list of the managed appliances. For example:

    proxy-hostname (config) # crypto certificate ca-list default-ca-list name 
rootCA-PublicCert

  16. Save your changes on the managed appliances:

    cm-hostname (config) # write memory
:
Related articles