Select Platform ViewSettingsGeneralCertificatesCA CertificateCreate New.

This will create a completely new root CA certificate and will also require new ID certificates for all entities. The previous signing certificate will be deleted.

Select Platform ViewSettingsGeneralCertificatesCA CertificateRenew Existing.

This will create a new certificate with the same content and public/private keys, but a different serial number and start/end date.

Only this new root CA requires distribution, in-date existing ID certificates signed by the previous CA will still be valid.

Select Platform ViewSettingsGeneralCertificatesCA CertificateImport.

The format must be PKCS#12.

This will replace the signing certificate and may require new ID certificates for all entities

Select Platform ViewSettingsGeneralCertificatesCA CertificateExport.

A password is requested to secure the PKCS#12 file

A popup will prompt to save the file which is named 'root-ca-p12'. Save the file to the local machine and add a '.p12' extension.

Select Platform ViewSettingsGeneralCertificatesCA CertificateImport.