Download a trust store containing the CA certificate chain of the client authentication certificate.

To issue the client authentication certificate

1. Log in to the EJBCA administration GUI.
2. Navigate to  CA Certificates and CRLs.
3. In the Certificate chain column of the ManagementCA row, select JKS.
4. Click Download. 

   When configuring the EJBCA Profile Properties, you must provide the path to the downloaded trust store file.