Root certificate on the key management server
If you use SafeNet KeySecure or Thales keyAuthority on the key management server, create and put the root certificate on the server.
For more information about SafeNet KeySecure, see the SafeNet KeySecure k460 documentation. For more information about Thales keyAuthority, see the Thales keyAuthority documentation.
The root certificate of the key management server must be in X.509 format.