Graphics Agent for Windows Administrators' Guide
This release is in Beta. Beta software is not fully supported, and may be incomplete or unstable. It is not intended for use in production systems. We welcome your feedback on this release! Send feedback to anyware-beta-feedback@hp.com.

Installing the Amazon Root CA 1-4 Certificates

Licensing issues with the Cloud License Service (CLS) might occur if the Amazon Root CA 1-4 certificates are not in the certificate store of your system. Amazon CA Root 1-4 certificates are part of the Microsoft Trusted Root Program, which means that the Amazon CA Root 1-4 certificates are included in the Microsoft's Trusted Root Certification Authorities Certificate Store. Therefore, updating your operating system is the quickest way to ensure that your system has these certificates.

Important

If updating your OS is not an option, install the root CA manually. If you need help updating your certificate, get in touch with the Support team.

Installing the Amazon Root CA 1-4 Certificates using Windows GUI

  1. Download the Amazon Root CA 1-4 certificates from the following location: amz-all-compliance.flexnetoperations.com.crt. Downloading the certificate file might generate a warning as shown below:

  2. Click Remove protection and open to proceed.

  3. Right-click the certificate, and click Install Certificate.

    Info

    If a security pop-up appears, click Open to proceed.

  4. On step 1 of the Certificate Import Wizard, choose a store location and click Next.

    • Local Machine, if you want to install the certificates for all users
    • Current User, if you want to install the certificates for the current user

  5. Select a location for the certificates, and click Next:

    1. Click Place all certificates in the following store.

    2. Click Browse and select the Trusted Root Certification Authorities store.

  6. Click Finish to confirm the installation.

  7. Ensure that the Amazon Root CA 1-4 certificates are installed correctly:

    1. From the Start Menu, open the Control Panel.

    2. Under Administrative Tools, click Manage Computer Certificates.

    3. Ensure that the Amazon Root CA 1-4 is installed:

Installing the Amazon Root CA 1-4 Certificates using the Command-line

Note: Command-line Installation

This method installs the latest certificates to your certificate store, and can only be performed if you have administrator privilege.

  1. Download the Amazon Root CA 1-4 certificates from the following location: amz-all-compliance.flexnetoperations.com.crt. Downloading the certificate file might generate a warning as shown below:

  2. Click Remove protection and open to proceed.

  3. Open Command Prompt as an administrator.

  4. Run the following command:

    certutil.exe -generateSSTFromWU roots.sst

  5. Run the following command to update the certificates:

    certutil.exe -addstore root roots.sst

  6. Ensure that the Amazon Root CA 1-4 certificates are installed correctly:

    1. From the Start Menu, open the Control Panel.

    2. Under Administrative Tools, click Manage Computer Certificates.

    3. Ensure that the Amazon Root CA 1-4 is installed:

Note

If the certificate is not in the Trusted Root Certification Authorities folder, move the crt file manually to it.

Last updated: Monday, May 19, 2025