HP Anyware Administrators' Guide
This release is in Beta. Beta software is not fully supported, and may be incomplete or unstable. It is not intended for use in production systems. We welcome your feedback on this release! Send feedback to anyware-beta-feedback@hp.com.

Installing the Amazon Root CA 1-4 Certificate

Overview

Customers face licensing problems with Cloud License Service (CLS) as the OS Trusted Root Certificate Authorities are not updated.

To resolve the issue users need to install the new certificate ("Amazon Root CA 1-4") on their OS.

Note: Certificate Updates

If you need any help on updating your certificate, please raise a support case at https://anyware.hp.com.

Updating OS

  • Amazon CA Root 1-4 are part of the Microsoft Trusted Root Program

  • Therefore, updating your operating systems (Windows, Linux, macOS) is the quickest way to update your OS' Trusted Root Authorities Store and resolve this issue.

Important: OS Update Alternate

We only recommend to manually install the root CA, if updating your OS is not an option or it does not fix the issue.

Root CA Installation for Windows

Users can use any of the two options mentioned below to perform the installation:

Option-1 Install the Certificate Using Windows GUI:

  1. In the Certificate window, click Install Certificate
  2. Choose Local Machine (for all users) or Current User (just for yourself) and click Next
  3. Select to Place all certificates in the following store: "Trusted Root Certification Authorities."
  4. Click OK to confirm the installation
  5. Go to Start Menu -> "Manage Computer Certificates", ensure that the Amazon Root CA 1-4 are installed as in the following screenshot:

Option-2 Command-line Installation:

Note: Command-line Installation

This option would install all latest certificates for Windows OS to your certificate store - consult your IT administrator as this requires admin privilege.

  1. Open Command Prompt with an elevation (admin) privilege
  2. Run: certutil.exe -generateSSTFromWU roots.sst
  3. Run: certutil.exe -addstore root roots.sst
  4. Go to Start Menu -> "Manage Computer Certificates", ensure that the Amazon Root CA 1-4 is installed as in the above screenshot

Note: Cert Not in Folder

If after installing, the cert is not in the above folder, you can manually move the crt file to the above folder.

Last updated: Thursday, April 3, 2025