Help Center/ Cloud Certificate & Manager/ SSL Certificate Manager (SCM) User Guide/ Installing/Deploying an SSL Certificate/ Installing the Root Certificate on a Client/ Downloading and Installing a Root Certificate
Updated on 2025-12-29 GMT+08:00
View PDF
Share

Downloading and Installing a Root Certificate

A root certificate is the root node of a certificate trust chain. It is used to verify the authenticity of all lower-level certificates issued by a certificate authority (CA) and is the basis of the client trust system.

  • You do not need to manually configure the root certificate in the following scenarios: If users access your web services through the JDK environment, mainstream browsers (such as Google Chrome, Mozilla Firefox, and Microsoft Edge), or OSs (such as Windows, macOS, Android, and iOS), you do not need to pay attention to the root certificate because the root certificate is embedded in the web server. You only need to install the SSL certificate issued by the CA on the web server to implement HTTPS communication between the client and server.
  • You need to manually install the root certificate in the following scenario: If users access your web services through a Java client, download the root certificate and manually install it on the client because the client does not have a built-in root certificate. This ensures that the client can verify the encryption information of your web server. For example, if a GeoTrust EV SSL certificate is installed on your web server, the GeoTrust EV root certificate must be installed on the client to implement HTTPS communication between the client and server.

When the root certificate is installed on the client, an insecure message may be displayed or the access may fail due to reasons such as root certificate expiration or policy change. You are advised to download the root certificate and install it in the default trust store of the system, and use the trust store to verify the client.

Constraints

Your customers access your web services through clients such as Java.

Download Links

Currently, only the following types of root certificates can be downloaded.

Installing a Root Certificate

The following uses Windows 10 as an example to describe how to install the root certificate.

  1. On the Windows 10 desktop, press Windows + R to open the Run dialog box. Enter mmc.

    Figure 1 Run dialog box

  2. Click OK. The Microsoft Management Console (MMC) is displayed.
  3. On the menu bar of the console, choose File > Add/Remove Snap-ins.

    Figure 2 Add or remove snap-ins

  4. Select Certificates from the Available Snap-ins list on the left, click Add, and click OK.

    Figure 3 Adding a certificate

  5. In the displayed Certificates snap-in dialog box, select Computer account and click Next.
  6. In the Select Computer dialog box, select Local computer: (the computer this console is running on) and click Finish.
  7. In the navigation tree on the left of the MMC console, click Certificates (Local Computer), right-click the target directory (for example, Enterprise Trust), and choose All Tasks > Import from the shortcut menu.

    Figure 4 Enterprise trust

  8. Import the certificate as prompted.