If you use SafeNet KeySecure k460 or Thales keyAuthority, or Enterprise Secure Key Manager 4.1 on the key management server, create and put the root certificate on the server. For details, see the SafeNet KeySecure k460, Thales keyAuthority, or Enterprise Secure Key Manager 4.1 documentation.

The root certificate of the key management server must be in X.509 format.