If you use your provisioning server with the HTTPS protocol and a private certificate authority, upload the root certificate of that certificate authority. If you use a public certificate authority, there is no need to upload a root certificate. You can upload the certificate from the Profile Management section. The certificate is used to establish a secure connection between the device and the provisioning server.