Previous Topic: Create the Certificate Database Files

Next Topic: Add the Server Certificate to the Certificate Database

Add the Root Certificate Authority to the Certificate Database

You add the root Certificate Authority (CA) to make it available for communication over SSL.

Note: The following procedure details the specific options and arguments to complete the task. For a complete list of the NSS utility options and arguments, refer to the Mozilla documentation on the NSS project page.

Important! If you are running a SiteMinder utility or executable on Windows Server 2008, be sure to open the command–line window with Administrator permissions, even if you are logged into the system as an Administrator. For more information, see the release notes for your SiteMinder component.

To add the root CA certificate to the certificate database

  1. From a command prompt, navigate to the bin directory in the location to which you extracted the NSS utility.

    Example: C:\nss\bin

    Note: Windows has a native certutil utility. Ensure you are working from the bin directory of the NSS utility or you may inadvertently run the Windows certutil utility.

  2. Run the following command to add the root CA to the database file:
    certutil -A -n alias -t trust_arguments -i root_CA_path -d certificate_database_directory
    

    NSS adds the root CA to the certificate database.

Example: Adding a Root CA to the Certificate Database

certutil -A -n "My Root CA"  -t "C,," -i C:\certificates\cacert.cer -d C:\certdatabase


Copyright © 2010 CA. All rights reserved. Email CA about this topic