Importing your Root CA

If your organization already has a Root CA, or if you have created a certificate as described elsewhere in this document, you can import it into Content Gateway. The certificate must be trusted by all browsers in your organization.

Be sure to back up any new internal Root CA that you import. See Backing up your internal Root CA for details.

To import your Root CA:

Steps

In the Content Gateway manager, go to the Configure > SSL > Internal Root CA > Import Root CA tab.
Click Choose File and browse to select the certificate. The certificate must be in X.509 format and base64-encoded.
Click Choose File and browse to select the private key. It must correspond to the certificate you selected in Step 2.
- The certificate and private key format must match.
- The private key format must match the format required by the importing node (unencrypted or encrypted).
  To verify the certificate and private key format, view the files in a text editor. Use Backup Root CA to export the CA from the database.
  Note:
  For information about converting the private key format, see:
Enter and confirm the Passphrase.
Click Import Root CA. The imported CA is stored in the SSL configuration database.
Restart Content Gateway.