HP Anyware Administrators' Guide
This release is in Beta. Beta software is not fully supported, and may be incomplete or unstable. It is not intended for use in production systems. We welcome your feedback on this release! Send feedback to anyware-beta-feedback@hp.com.

Installing the Amazon Root CA 1-4 Certificates

Licensing issues with the Cloud License Service (CLS) might occur if the Amazon Root CA 1-4 certificates are not in the certificate store of your system. Amazon CA Root 1-4 certificates are part of the Microsoft Trusted Root Program, which means that the Amazon CA Root 1-4 certificates are included in the Microsoft's Trusted Root Certification Authorities Certificate Store. Therefore, updating your operating system is the quickest way to ensure that your system has these certificates.

Important

If updating your OS is not an option, install the root CA manually. If you need help updating your certificate, get in touch with the Support team.

Installing the Amazon Root CA 1-4 certificates on RHEL/Rocky

  1. Download the Amazon Root CA from the following location: amz-all-compliance.flexnetoperations.com.crt.

  2. Copy the downloaded certificate file to the anchors directory found in the following location: /etc/pki/ca-trust/source/

  3. Update the trust list by running the following command:

    sudo update-ca-trust
    
  4. Run the following command to ensure that the certs directory has the Amazon_Root_CA_*.pem (1-4) files. The certs directory is available in the following location: /etc/ssl/certs.

    openssl x509 -in /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem -text -noout
    

Installing the Amazon Root CA 1-4 certificates on Ubuntu

  1. Download the Amazon Root CA from the following location: amz-all-compliance.flexnetoperations.com.crt.

  2. Open a Terminal.

  3. Run the following command to install the certificates:

    sudo apt install ca-certificates
    
  4. Update the trust list by running the following command:

    sudo update-ca-certificates
    
  5. Run the following command to ensure that the certs directory has the Amazon_Root_CA_*.pem (1-4) files. The certs directory is available in the following location: /etc/ssl/certs.

    ls -lha /etc/ssl/certs | grep Amazon_Root_CA
    

Last updated: Monday, May 19, 2025