Managing the list of trusted root certificates

To add a certificate to the list of trusted root certificates, run the following command:

kess-control --add-certificate <path to certificate>

where:

<path to certificate> is the path to the certificate file that you want to add (PEM or DER format).

To remove a certificate from the list of trusted root certificates, run the following command:

kess-control --remove-certificate <certificate subject>

To view the list of trusted root certificates, execute the following command:

kess-control --list-certificates

The following information is displayed for each certificate:

• certificate subject
• serial number
• certificate issuer
• certificate start date
• certificate expiration date
• SHA256 certificate fingerprint