Importing the root certificate into the Workbench User Trust Store

When serving as your own CA, each client requires the root certificate with its public key in its User Trust Store. If your server certificates are signed by an external CA, its root certificate and public key should already be in the platform/station’s System Trust Store.
Prerequisites: You are working in Workbench running on a PC.
  1. To open the Certificate Management view, click Tools > Certificate Management.
    The Workbench Certificate Management view opens to the User Key Store.
  2. Click the User Trust Store tab.
  3. Click Import.
  4. Locate and select the root certificate’s .pem file (My Host > My File System > User Home > certManagement > rootcert, and click Open.
  5. Confirm that you are importing the correct root certificate (in this chapter it is the only root certificate), and click OK.
    The system imports the root certificate.

    The green shield with the check mark indicates that your company’s root certificate with its public key is in the client User Trust Store, ready to verify the identify of the server certificates signed by its private key.

Workbench is ready to function as a client. Using this certificate it verifies that the server certificates presented to it are valid if, and only if, they were signed by this certificate’s private key.