User's Manual

User Manual User Guide

3.2 Installing Root Certificate Authorities (CAs)

When connecting to a CSMS using a secured TLS connection, the vSECC uses its installed

root certificate authorities (Root-CAs) for verifying the server’s certificate chain. The vSECC

already comes with the mozilla root certificate store pre-installed. Additional Root-CAs can

be installed either by using the web interface or via OCPP.

To install a Root-CA using the web interface, put the vSECC into maintenance mode as

desribed in chapter 3.1.1. Head over to the ”Certificate upload” section as seen in Figure

19. Then press the [Browse...] button to select a certificate you would like to install. Pressing

the [Upload] button finishes the installation of the certificate. The changes take effect after

the next reboot of the system.

Figure 19: Installing Root-CAs

Installing a Root-CA via OCPP uses the ”InstallCertificate” messages. The vSECC will store

the transmitted certificate inside its trusted storage. The ”DeleteCertificate” OCPP mes-

sages can be used for deleting a previously installed certificate. For further information

about the structure and usage of those messages, please refer to the OCPP 2.0.1 Part 2 -

Specification document.