After you install your required root certificates, import the CA response from the CA by right-clicking the tomcat keypair and clicking Import CA Reply.
If your certificate is in Base64-encoded format (with a *.pem or *.cer extension) and you import the certificate with another file, an error may appear. If this occurs, copy the certificate text that includes:
and ends with:
After you import your certificate reply, Portecle reports that the certificate was imported successfully.
If you import the CA Reply and Portecle generates an error stating that the certificate cannot be trusted, the root certificate may not be included. To determine which certificate you need, temporarily import your CA Reply as a Trusted Certificate (rather than a CA Reply certificate) and examine the Certificate Details.
Obtain a certificate from your CA that matches the Locate the Issuer property value and import the certificate into Portecle as a Trusted Certificate. Once you import this certificate into Portecle, as well as any other certificates needed by its issuer, you can delete your own trusted certificate and re-import it as a CA Reply to your keypair.