Importing custom CA certificates

Importing a custom CA certificate entails exporting the CA root certificate (AEP CA) from the Firefox browser and then importing that certificate into the JRE cacerts file. Once imported, the JRE can use the certificate to validate a TLS connection.

To import a custom CA certificate, use the following steps:

Export the CA root certificate from the Firefox browser.
1. Open the SN page in the browser.
2. Right-click on the page and select View Page Info.
  Firefox will display a dialog box with the page information.
3. Select the Security icon tab.
4. Click on the View Certificate button on the right of the dialog box.
  Firefox will display another dialog box.
5. Select the Details tab.
6. In Certificate Hierarchy, select the root certificate at the top of the certificate tree hierarchy.
7. Click the Export... button to export the selected certificate to a file.
8. Accept the default name and format (PEM).
9. Make a note of the name used.
Import this certificate into the JRE cacerts file.
1. From a command line, run the following command:
```
cd $NCHOME/platform/linux2x86/jre64_1.8.0/jre/bin
```
  This directory contains keytool, the tool that you will use to import the certificate into the cacerts file.
2. Run the following command:
```
./keytool -import -file cert.crt -keystore
```
  Where cert.crt is the the name you specified in Step 1.8.
3. Run the following command:
```
../lib/security/cacerts -storepass "changeit"
```
  Where changeit is the store password.
  
  keytool will display the certificate details and prompt you to add the certificate.
4. Enter Y (yes).
  With cacerts updated to include the AEP CA certificate, the TLS negotiation can now verify the server, the connection should complete, and allow the gateway to run.