How to Export Root Certificates via Web Browser — RSA Authentication Manager, Identity Router, or Cloud Authentication Service
Originally Published: 2018-08-21
Article Number
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager, Identity Router, Cloud Authentication Service
Version(s): All supported versions
Issue
Administrators may need to export the SSL root certificate from RSA Authentication Manager, Identity Router, or the Cloud Authentication Service for use in system configuration scenarios.
Resolution
ℹ️ NOTE: These instructions apply specifically to Chrome. If Chrome is not available in your environment, search online for 'export root certificate from <browser vendor name>. Other browsers generally follow similar steps.
Step 1: Browse to the appropriate URL for your product:
| Product | URL |
|
RSA Authentication Manager
| https://<AM-server-FQDN>/sc |
|
Identity Router
|
https://<IDR-Mangement-IP>/steup.jsp |
|
Cloud Authentication Service
| https://<company-subdomain>-<baseAccessDNSName>.securid.com |
For Cloud Authentication Service, refer to the following table for your
baseAccessDNSName:| Deployment | baseAccessDNSName |
| US | access |
| GOV | access |
| ANZ | access-anz |
| EMEA | access-eu |
| India | access-in |
| Japan | access-jp |
| Canada | access-ca |
| Singapore | access-sg |
Step 2: Click the lock icon in the browser address bar.
Step 3: Click Connection is secure.
Step 4: Click Certificate is valid.
Step 5 : Click the Details.
Step 6: Double-click the top-level (root) certificate in the list.
Step 7: Click Export.
Step 8: Rename it .cer
Step 9: The certificate has been saved and is now accessible at the specified location
Notes
SHA256 Certificate Requirement: For certain versions of Authentication Manager and associated agents — such as MFA Agent 9.0 for PAM — a SHA256 certificate is required. Verify your agent's certificate requirements before exporting.
