# Manage the CA certificate using the GUI

Using the GUI, you can:

* [Set custom CA certificate](#set-custom-ca-certificate)
* [Manage the custom CA certificate](#manage-the-custom-ca-certificate):
  * Replace the custom CA certificate
  * Reset the custom CA certificate settings
  * Download the custom CA certificate

## Set custom CA certificate <a href="#set-custom-ca-certificate" id="set-custom-ca-certificate"></a>

The system uses well-known CA certificates to establish trust with external services. For example, when using a KMS. If a different CA certificate is required for Weka servers to establish trust, set this custom CA certificate on the Weka servers.

![Set custom CA certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FlaBNL1WpwEsZJrAFn7u6%2Fwmng_custom_certificate.png?alt=media\&token=5f8c07ff-f6ce-4c12-a1f0-30d07fa01c53)

**Procedure**

1. From the menu, select **Configure > Cluster Settings**.
2. From the left pane, select **Security**.
3. In the TLS Certificate section, select **Set custom CA certificate**.
4. In the Set Custom CA Certificate dialog, do one of the following:
   * Select **Upload CA certificate file**, and upload the custom CA certificate file.
   * Select **Paste the custom certificate content**, and paste the content of the custom CA certificate.
5. Select **Save**.

![Set Custom CA certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FCEf9ZeVlEz7cLyR2igC1%2Fwmng_set_custom_CA_certificate.png?alt=media\&token=256b529a-4401-4ac4-a7af-dd522a1956f6)

## Manage the custom CA certificate <a href="#manage-the-custom-ca-certificate" id="manage-the-custom-ca-certificate"></a>

Once a CA certificate is set, you can:

* Replace the CA certificate with a new one according to the deployment needs.
* Remove (reset) the custom CA certificate settings.
* Download the existing CA certificate for later use.

![Custom Certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FJ8jbzYvJs1lpX37t7XCQ%2Fwmng_custom_certificate_set.png?alt=media\&token=47a5c0ff-bc77-4cc5-8fc7-340a64688490)

**Procedure**

1. From the menu, select **Configure > Cluster Settings**.
2. From the left pane, select **Security**.
3. In the TLS Certificate section, select **Replace custom CA certificate**.
4. In the Set Custom CA Certificate dialog, do one of the following:
   * Select **Upload CA certificate file**, and upload the custom CA certificate file.
   * Select **Paste the custom certificate content**, and paste the content of the custom CA certificate.
5. Select **Save**.
6. If required to remove the custom CA certificate, select **Reset custom CA certificate settings**. In the confirmation message, select **Yes**.
7. To download the existing CA certificate, select **Download custom CA certificate**. In the dialog, set a name for the certificate and select **Download**.

![Download Custom CA Certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FJZHhs998RyZvZe3sU8uz%2Fwmng_download_custom_CA_certificate.png?alt=media\&token=16c4bf2e-3eca-43e8-b9d4-a0deac68db80)