# How to Add Root CAs to Ubuntu

Reference: [https://ubuntu.com/server/docs/install-a-root-ca-certificate-in-the-trust-store](https://ubuntu.com/server/docs/install-a-root-ca-certificate-in-the-trust-store)

Install the CA certificate package:

```bash
sudo apt-get install -y ca-certificates
```

Now, you can install any local intranet root CA, with this:

<p class="callout info">NOTE: We are copying in the .crt file.  
Once the trust bundle is created, with a later step, the file will be converted to PEM format.</p>

```
sudo cp ogsofttech.lan_ca.crt /usr/local/share/ca-certificates
```

Once you have all the certificates loaded, you need to add them to the trust store, with this:

```bash
sudo update-ca-certificates
```

Once done, you can verify that your certificate is in pem format:

```bash
sudo ls /etc/ssl/certs/ | grep ogsofttech.lan_ca
```

You will see something like this, if loaded into the trust bundle:

[![image.png](https://wiki.galaxydump.com/uploads/images/gallery/2025-09/scaled-1680-/oon0eR91hMZejMKT-image.png)](https://wiki.galaxydump.com/uploads/images/gallery/2025-09/oon0eR91hMZejMKT-image.png)

If you are looking for the local intranet Root CA certificate, see this: [Current Intranet Root CA Certificate](https://wiki.galaxydump.com/link/454#bkmrk-current-intranet-roo)