When serving as your own CA, each client requires the root certificate with its public key in its User Trust Store. If your server certificates are signed by an external CA, its root certificate and public key should already be in the platform/station’s
System Trust Store
Prerequisites: You are working in
Workbench running on a PC.
- To open the Certificate Management view for the platform/station, expand Platform and double-click Certificate Management.
The Certificate Management view opens to the User Key Store tab.
- Click the User Trust Store tab.
- Click Import.
- Locate and select the root certificate’s .pem file (, and click Open.
- Confirm that you are importing the correct root certificate (in this chapter it is the only root certificate), and click OK.
The system imports the root certificate.
The green shield with the check mark indicates that your company’s root certificate with its public key is in the client User
Trust Store, ready to verify the identify of the server certificates signed by its private key.
Your platform/station is ready to function as a client. Using this certificate it verifies that the server certificates presented
to it are valid if, and only if, they were signed by this certificate’s private key.
NOTE: You need to do this for the Supervisor platform/station as well as for each controller platform/station.