Red Hat CERTIFICATE SYSTEM ENTERPRISE - SECURITY GUIDE Manual page 48

Chapter 5. Using Enterprise Security Client Keys for SSL Client Authentication and S/MIME
3. If the CA is not yet trusted, download and import the CA certificate.
a. Open the SSL End Entity page on the CA. For example:
https://example.com:9443/ca/ee/ca
b. Click the Retrieval tab, and then click Import CA Certificate Chain.
c. Click Download the CA certificate chain in binary form and then click Submit.
d. Choose a suitable directory to save the certificate chain, and then click OK.
e. Click Edit > Preferences, and select the Advanced tab.
f. Click the View Certificates button.
g. Click Authorities, and import the CA certificate.
4. Set the certificate trust relationships.
a. Click Edit > Preferences, and select the Advanced tab.
b. Click the View Certificates button.
c. Click Edit, and set the trust for websites.
42