Amazon Root CA 1 Cert

Last Updated: April 07, 2026

Below are the steps you need to obtain an Amazon Root CA1 so you can manually install it on a printer. Use your preferred browser to export the certificate and name and save it where you can access it to upload to the multifunction printer (MFP).

Instructions by Browser and OS

  • Chrome
  • Edge
  • Firefox

The export steps are the same regardless of what operating system you use. The difference is on how the operating systems process the exported file so it's ready to upload.

Export the Certificate

  1. In the web browser, open the Vasion Print Admin Console, and then select the Site information button "Site information" button. to the left of the URL.

    Browser showing "Site information" button next to URL.

  2. Select Connection is secure.

  3. Select Certificate is valid.

  4. In the Certificate Viewer modal, select the Details tab.
  5. Select Amazon Root CA 1, and then select Export.

Windows OS

  1. Browse to the location in which you want to save the file, name the file, and select Save.

  2. Use File Explorer to open the certificate with the Crypto Shell Extensions.

  3. Select the Details tab, and ensure that <All> is selected in the Show field.
  4. Select Copy to File, and select Next.
  5. Select the Base-64 encoded X.509 (.CER) option, and select Next.
  6. Browse to the location in which you want the certificate, name it, and select Next.
  7. Select Finish.

Mac / Linux

  1. Open a terminal, and browse to the location where the certificate downloaded.

  2. Run the following command, replacing <infile> with the certificate name as it was downloaded and <outfile> with the name you want.

    Copy Code 
    $ openssl base64 -in <infile> -out <outfile>

The certificate is ready for upload to a printer.

The export steps are the same regardless of what operating system you use. The difference is on how the operating systems process the exported file so it's ready to upload.

Export the Certificate

  1. In the web browser, open the Vasion Print Admin Console, and then select the Lock button to the left of the URL.

    Browser showing Lock button next to URL.

  2. Select Connection is secure.

  3. Select the Certificate button Certificate button..

    Browser showing Certificate button.

  4. In the Certificate Viewer modal, select the Details tab.
  5. Select Amazon Root CA 1, and then select Export.

Windows OS

  1. Browse to the location in which you want to save the file, name the file, and select Save.

  2. Use File Explorer to open the certificate with the Crypto Shell Extensions.

  3. Select the Details tab, and ensure that <All> is selected in the Show field.
  4. Select Copy to File, and select Next.
  5. Select the Base-64 encoded X.509 (.CER) option, and select Next.
  6. Browse to the location in which you want the certificate, name it, and select Next.
  7. Select Finish.

Mac / Linux

  1. Open a terminal, and browse to the location where the certificate downloaded.

  2. Run the following command, replacing <infile> with the certificate name as it was downloaded and <outfile> with the name you want.

    Copy Code 
    $ openssl base64 -in <infile> -out <outfile>

The certificate is ready for upload to a printer.

Export the Certificate

The export steps are the same regardless of what operating system you use. The difference is on how the operating systems process the exported file so it's ready to upload.

  1. In the web browser, open the Vasion Print Admin Console then select the Lock icon to the left of the URL.

    Browser bar for a Vasion Print instance showing the lock icon next to the URL.

  2. Select Connection is secure.
  3. Select More Information.

  4. On the Security tab, select View Certificate.

    Security tab of the Page Info modal with the View Certificate option

  5. In the Certificate page, select the Amazon Root CA 1 tab.
  6. In the Miscellaneous section, select the PEM (cert) download link.
  7. Select Export.

Windows OS

  1. Browse to the location where the file downloaded, and open the certificate with the Crypto Shell Extensions.

  2. Select the Details tab, and ensure that <All> is selected in the Show field.
  3. Select Copy to File, and select Next.
  4. Select the Base-64 encoded X.509 (.CER) option, and select Next.
  5. Browse to the location in which you want the certificate, name it, and select Next.
  6. Select Finish.

Mac / Linux

  1. Open a terminal, and browse to the location where the certificate downloaded.

  2. Run the following command, replacing <infile> with the certificate name as it was downloaded and <outfile> with the name you want.

    Copy Code 
    $ openssl base64 -in <infile> -out <outfile>

The certificate is ready for upload to a printer.

Upload the Certificate

You can upload your certificate by signing in to the printer's web portal. The location where to find the upload option varies by manufacturer, but you can typically find certificate options in the Security section.