Uploading CA Certificates from Non-root CAs (CLI)

If your server certificate is signed by a non-root CA, you also need to obtain certificates for the second- and higher-level CAs. After obtaining these CA certificates, use the following steps to upload them.

1. To upload a certificate, enter the configuration settings certificates system context, and enter the import command.

   hostname:configuration settings certificates system> import
   ("." to end)> -----BEGIN CERTIFICATE-----
   ("." to end)> MIID0DCCArigAwIBAgIBQDANBgkqhkiG9w0BAQUFADCBmDELMAkGA1UEBhMCVVMx
     ...
   ("." to end)> 2ai9ZwREdTkcjcgQDxeHNZCpcHk=
   ("." to end)> -----END CERTIFICATE-----
   ("." to end)> .

2. Repeat step 1 for each signed certificate.
3. To check the imported certificates, view all certificate entries using the command show.

   hostname:configuration settings certificates system> show
   Properties:
                   default = auto
   System Certificates:
   CERT     TYPE SUBJECT                   ISSUER                    EXPIRES   
   cert-000 req  hostname.us.example.com     
   cert-001 CA   Joe Test CA              Joe Test CA               2038-1-19
   cert-002 cert hostname.us.example.com  Joe Test CA               2038-1-21