Export certificates

You can export the current root certificate and system certificate by using the management GUI or command line interface (CLI).

You must add the system's root certificates and system certificates to the trust stores of the other systems, web browsers, key servers or any other devices to authenticate the identity and secure the communication channel. If the browser, device, or application supports chain of trust checking, then only the root certificate is needed.

Using the management GUI

To export the root certificate, complete these steps:

In the management GUI, select Settings > Security > System Certificates.
From the icon menu, select Export Root Certificate.
In the Export Root Certificate page, you can either download the certificate file by clicking Export Certificate or copy the contents of the file to clipboard by clicking Copy to clipboard.

To export the system certificate, complete these steps:

In the management GUI, select Settings > Security > System Certificates.
From the icon menu, select Export System Certificate.
In the Export System Certificate page, you can either download the certificate file by clicking Export Certificate or copy the contents of the file to clipboard by clicking Copy to clipboard.

Using the command line interface (CLI)

In the command-line interface, enter the following command to export the certificate:

Enter the following command to export the certificates to file /dumps/certificate.pem
```
chsystemcert -export
```
Note: The chsystemcert -export command exports the full chain of trust. Alternatively, to export the system's root certificate before the system initialization, use the satask exportrootcertificate command. You must run this command on the node that is used to do the system initialization. You can also use the sainfo lsrootcertificate command to view the details of the system's root certificate.
After the certificate is exported, use secure copy (scp) to copy the certificate from the system.