Use the commands in this section to activate a Web server CA certificate chain.
To activate a Web server CA certificate chain:
Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Activate the certificate chain:
hostname (config) # web server ssl ca-chain <chainName>
where:
chainName is a unique name for the CA certificate chain. The name must begin with a letter or number. The remaining characters in the name can be letters, numbers, periods (.), dashes (-), and underscores (_).
Verify your change:
hostname (config) # show web
Save your changes:
hostname (config) # write memory
To deactivate a Web Server CA certificate chain:
Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Deactivate the chain:
hostname (config) # no web server ssl ca-chain
Example
The following example activates the "apache01" certificate chain.
hostname (config) # web server ssl ca-chain apache01
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Certificates > Managing CA certificates > Configuring a Web server CA certificate chain
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Certificates > Managing CA certificates > Configuring a Web server CA certificate chain