Dell PowerConnect W Clearpass 100 Software 3.9 Deployment Guide - Page 78

Choose the file to upload in the Certificate field. To upload a single certificate, choose a certificate file in PEM (base-64 encoded) or binary format (.crt or PKCS#7). Leave the passphrase fields blank. To upload a certificate's private key as a separate file, choose the private key file in PEM (base-64 encoded) format. If the private key has a passphrase, enter it in the Private Key Passphrase and Confirm Passphrase fields. The private key will be automatically matched to its corresponding certificate when uploaded. To upload a combined certificate and private key, choose a file in either PEM (base-64 encoded) or PKCS#12 format. If the private key has a passphrase, enter it in the Private Key Passphrase and Confirm Passphrase fields. Click the Upload Certificate button to save your changes.  If additional certificates are required, you will remain at the same page. Check the message displayed above the form to determine which certificate or type of file must be uploaded next.  When the trust chain is complete, it will be displayed. This completes the initialization of the certificate authority. Renewing the Certificate Authority's Certificate When a root certificate is close to expiration, it must be renewed. Navigate to Onboard > Certificate Authority Settings and click the Renew Root Certificate link. The Root Certificate Renewal form is displayed. Select an option in the Renewal Type drop-down list:  Basic Renewal - Uses the same private key for the root certificate, but reissues the root CA certificate with an updated validity period. Use this option to maintain the validity of all certificates issued by the CA. 78 | Onboard ClearPass Guest 3.9 | Deployment Guide