Retrieving a certificate manually

You can download CA certificates, local certificates, or peer entity certificates from the CA server and save them locally. To do so, use either the offline mode or the online mode. In offline mode, you must retrieve a certificate by an out-of-band means like FTP, disk, or email, and then import it into the local PKI system.

Certificate retrieval serves the following purposes:

• Locally store the certificates associated with the local security domain for improved query efficiency and reduced query count

• Prepare for certificate verification