Installing the Amazon Root CA 1-4 Certificates

Licensing issues with the Cloud License Service (CLS) might occur if the Amazon Root CA 1-4 certificates are not in the certificate bundle of your system. Therefore, updating your operating system is the quickest way to ensure that your system has these certificates.

Important

If updating your OS is not an option, install the root CA manually. For assistance with certificate updates, get in touch with the Support team.

Installing the Amazon Root CA 1-4 certificates on RHEL/Rocky

Download the Amazon Root CA from the following location: amz-all-compliance.flexnetoperations.com.crt.
Copy the downloaded certificate file to the anchors directory found in the following location: /etc/pki/ca-trust/source/.
Update the trust list by running the following command:
```
sudo update-ca-trust
```
Run the following command to ensure that the certs directory has the Amazon_Root_CA_*.pem (1-4) files. The certs directory is available in the following location: /etc/pki/ca-trust/source/.
```
openssl x509 -in /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem -text -noout
```

Installing the Amazon Root CA 1-4 certificates on Ubuntu

Download the Amazon Root CA from the following location: amz-all-compliance.flexnetoperations.com.crt.
Open a Terminal.
Run the following command to install the certificates:
```
sudo apt install ca-certificates
```
Update the trust list by running the following command:
```
sudo update-ca-certificates
```
Run the following command to ensure that the certs directory has the Amazon_Root_CA_*.pem (1-4) files. The certs directory is available in the following location: /etc/ssl/certs.
```
ls -lha /etc/ssl/certs | grep Amazon_Root_CA
```

Last updated: Thursday, June 12, 2025