---
title: "Installing Your CA Root Certificate"
canonical: "https://docs.cuesystem.com/space/HTBCA/480673868/Installing%20Your%20CA%20Root%20Certificate"
format: markdown
---
The root certificate must be installed on all client devices that will connect to secure web servers that will be signed by your certification authority. Thus, we need to add the root certificate to any laptops, desktops, touchONE and CUE units, etc. that will be accessing your HTTPS sites (touchONE-admin, Web admin of the touchONE units, etc.). This can be a bit of a pain, but the good news is that we only have to do it once. Once our root certificate is on each device, it will be good until it expires.

## Adding the CA Root Certificate to Microsoft Windows 10/11 and   
Windows Server

- Run **mmc **(in the search box).
- Click **Menu File – Add/Remove Snap-in**.
- Double click **Certificates Snap-in**.
- Select **Computer account**, then **Local computer** and **Finish**.
- Confirm with **OK**.
- In Certificates browse to **Trusted Root Certification Authorities/Certificates**.
- In free space (under the last certificate) right-click, select **All Tasks** and **Import**. It started import wizard.
- Choose **Local machine**, browse for file (select All Files *.* in the file extension filter to make *.pem files visible) and choose your <span style="color: #ff5630">ContosoCARootCertificate.pem</span> file.
- Then select **Place all certificates in the following store** and choose **Trusted Root Certification Authorities**. Click **Next** and **Finish** to complete the certificate import.
- Your CA root certificate is now uploaded to your computer and you can see it in the list of trusted root certification authorities.

## Adding the CA Root Certificate to touchONE and CUE units

You can upload the certificate to touchONE and touchCUE units using the Admin Web.

<details>
<summary>Accessing Admin Web</summary>

> Macro (include)
</details>

> Macro (include)