If CMP is not used in the cross-certification, but instead the PKCS #10 certification request is sent to the CA, the issued cross-certificate has to be inserted in the SSH Tectia Certifier database manually. This can be done by selecting the Insert Certificate option in the System Configuration menu.
There are two fields in the Insert External Certificate page. Click the Search button and select from the Associated Request field the request that corresponds to the issued cross certificate.
The issued cross-certificate needs to be copied and pasted in base-64-encoded (PEM) format in the large text input field. Click the View Certificate button to see the contents of the issued cross-certificate.
Figure : The certificate can be pasted in the text input field