The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Activating a Web server CA certificate chain using the CLI

Published on Sep 1, 2026

1 minute(s) read

Use the commands in this section to activate a Web server CA certificate chain.

To activate a Web server CA certificate chain:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Activate the certificate chain:
```
hostname (config) # web server ssl ca-chain <chainName>
```
where:
- chainName is a unique name for the CA certificate chain. The name must begin with a letter or number. The remaining characters in the name can be letters, numbers, periods (.), dashes (-), and underscores (_).
Verify your change:
```
hostname (config) # show web
```
Save your changes:
```
hostname (config) # write memory
```

To deactivate a Web Server CA certificate chain:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Deactivate the chain:

hostname (config) # no web server ssl ca-chain

Example

The following example activates the "apache01" certificate chain.

hostname (config) # web server ssl ca-chain apache01

:

Was this article helpful?