> # Installing Identity Certificates

> You receive the identity certificate from the CA by e-mail or through a web browser in base64 encoded text form. You must install the identity certificate from the CA by cutting and pasting the encoded text using the CLI import facility.

> ## Detailed Steps

> To install an identity certificate received from the CA, follow these steps:

> 1. Expand Switches > Security, and then select PKI in the Physical Attributes pane.
> 2. Click the Trust Point Actions tab, in the Information pane.
> 3. Select the certimport option from the Command drop-down menu to import an identity certificate in this trust point. The identity certificate is obtained from the corresponding CA for a CSR that was generated previously (see "Generating Certificate Requests" topic).

> Note The identity certificate should be available in PEM format in a file in bootflash.

> 4. Enter the name of the certificate file that should have been copied to bootflash in the URL field in the bootflash:filename format.
> 5. Click Apply Changes to save your changes.

> If successful, the values of the identity certificate and its related objects, like the certificate file name, are automatically updated with the appropriate values as per the corresponding attributes in the identity certificate.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.