Download a trust store containing the CA certificate chain of the client authentication certificate.

To issue the client authentication certificate

1. Log in to the EJBCA RA GUI.
2. Navigate to  CA Certificates and CRLs.
3. In the Certificate chain column of the ManagementCA row, select JKS.
4. Click Download. 

   When configuring the EJBCA properties, you must provide the path to the downloaded trust store file.