SDX 6.4.0 Release Notes > Installing the Server Certificate on the Router

Installing the Server Certificate on the Router

The TLS client (JUNOS routing platform) needs a copy of the certificate that was used to sign the SAE certificate so that it can verify the SAE certificate. To install the certificate authority certificate on the JUNOS routing platform:

1. Include the following statements at the [edit security certificates certificate-authority] hierarchy level.

[edit]

security{

    certificates{

            certificate-authority SAECert{

                File /var/db/certs/ca.pem

            }

    }

}

2. Include the following statements at the [edit system services service-deployment] hierarchy level.

[edit]

system{

    services{

        service-Deployment{

                servers {

                    server-address port port-number{

                        Security-options {

                            tls;

                        }

                    }

                }

        }

    }

}