Root certificate on the key management server

If you use SafeNet KeySecure or Thales keyAuthority on the key management server, create and put the root certificate on the server.

For details about SafeNet KeySecure, see the SafeNet KeySecure k460 documentation. For details about Thales keyAuthority, see the Thales keyAuthority documentation.

The root certificate of the key management server must be in X.509 format.