Install new root CA certificate

If the root CA of any of the renewed certificates is a root CA which has not used before in the system, install the new root CA certificate on all system servers and workstations.

1. To install the new root CA certificate on all system servers, copy the root CA certificate to:

   <install_dir>\conf\security.

2. Open a command window as an administrator, and navigate to:

   <install_dir>\conf\security.

3. Enter the following command:

   installRootCACert.cmd <root_ca_cert_filename>

4. If more than one new root CA is used to sign the new server certificates on any system server or on the load balancer, repeat the steps 1-3 for each new root CA certificate.

5. Install the new root CA certificates on all workstations, by loading them to:

   • Windows Trusted Root Certification Authorities store

   • Java Trusted Certificates authorities store (can be added from Java Control Panel)