Root CA certificate is required for activation error when importing a custom certificate signed by a known CA into Operations Console for RSA Authentication Manager 8.x
Originally Published: 2016-03-29
Last Modified: 2026-01-14
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
The root CA certificate is required for activation.
Import the root certificate from your CA and try again
The signed certificate in PKCS#7 format.
Resolution
There are many methods to obtain the root CA certificate and intermediate certificate. Here is one of those ways:
- On a Windows OS, double-click on the signed certificate file. This will bring up the properties of the certificate.
- Click on the certification path. This will list the certificate chain that signed your certificate.
- Double-click on the top-most CA certificate, usually this is the root CA certificate. This should open the properties of the root CA certificate.
- Click on the Details tab on the properties of the root CA certificate.
- Click the Copy to file button. This will bring up the Certificate Export Wizard.
- Click Next.
- Select the export file format. Choose base-64 encoded X.509 (.cer).
- Click Next.
- On the next screen, select to location to save the exported root CA certificate.
- Repeat steps 2-9 for any intermediate CA certificates that need to be exported.
- Log into the operations console, and import the root CA certificate along with any intermediate CA certificates. Before to import the CA certificates in the order it was listed in the certificate chain path (from top-down).
- Finally, import the signed certificate you had received from the CA.
Related Articles
This certificate or its signing CA is not valid error when importing a certificate chain in RSA Authentication Manager 8.x… Number of Views How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings. Number of Views How to create and configure certificates for HTTPS access when using intermediate CA certs in RSA Identity Governance & Li… Number of Views How to Obtain the RSA Root CA Certificate from RSA Authentication Manager 8.x — Browser or SSH Number of Views How to import CA signed console cert from AM 8.x primary into a new primary with same FQDN Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide User Application Portal The RSA Identity Governance & Lifecycle AD Collector and AD ADC authentication source fail to establish a TLS 1.2 SSL conn… RSA Authentication Manager 8.1 Quick Setup Fails with "Failed to Attach Replica Instance" How to Replace the Web Server Certificate for the RSA Identity Governance & Lifecycle Web Console
Don't see what you're looking for?
