Custom CACerts with 10.0.9

[JasonWalker]

@mikelbeck

I need to add our PKI’s CA and Subordinate certificates to the TrustedDownloadCerts folder on the root server, correct? Will they be automatically distributed to relays and clients or do I need to create a task to do that (such as the one shown on this page)?

Yes, in standard usage you will need to add your Root and Intermediate CA certificates to the TrustedDownloadCerts directory on the server.

This is not automatically distributed to Relays or Clients. You only need to configure this on Relays and Clients if they are performing direct Internet downloads ( using the settings for _BESClient_Download_Direct or one of the domain list variants on clients, or _BESGather_Download_CheckInternetFlag on Relays, or the “download now” ActionScript command). Otherwise, by default only the Root Server is actually doing the Internet downloads and needs the certificate trust list updated.