# Error certPem in body is required **URL:** \ **Category:** Uncategorized\ **Created:** [August 14, 2023, 1:00pm UTC](https://openziti.discourse.group/t/error-certpem-in-body-is-required/1496 "2023-08-14T13:00:00Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![kashif](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/kashif/32/1197_2.png) [@kashif](https://openziti.discourse.group/u/kashif)\ **Post date:** [August 14, 2023, 1:00pm UTC](https://openziti.discourse.group/t/error-certpem-in-body-is-required/1496/1 "2023-08-14T13:00:00Z")
Hi, I don’t know if I am doing right. There are 3 certificates (.pem) that I have found in hostname.env in openziti. I was creating a certificate on ZAC in Manage Certificate Authorities. I selected (and inserted in textarea) all those 3 certificates one by one. But its showing ```auto An Error Occurred Error certPem in body is required ``` ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [August 14, 2023, 3:03pm UTC](https://openziti.discourse.group/t/error-certpem-in-body-is-required/1496/2 "2023-08-14T15:03:16Z")
Hi @kashif, there’s not quite enough information here for me to understand what you are trying to do. It looks to me like you’re trying to make an external 3rd party CA? If that’s the case, you’ll want to use only **the** CA in that field but you also don’t **need** to do any of this either. Can we maybe take a step back and just outline what it is you’re trying to accomplish first and we’ll go from there? ---
**Author:** ![kashif](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/kashif/32/1197_2.png) [@kashif](https://openziti.discourse.group/u/kashif)\ **Post date:** [August 15, 2023, 1:19pm UTC](https://openziti.discourse.group/t/error-certpem-in-body-is-required/1496/3 "2023-08-15T13:19:09Z")
Hi, Thank you very much for clarification. So if I have a self signed CA certificate then I just need to convert it to .pem then I can select it? ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [August 15, 2023, 1:25pm UTC](https://openziti.discourse.group/t/error-certpem-in-body-is-required/1496/4 "2023-08-15T13:25:51Z")
If you have your own CA, you can convert it to a .pem and then use it, yes, but you'll need to be able to verify you have ownership of that CA by creating a certificate signed by that CA with a specific value in the CN. That's called 'verifying' the CA. I made a video outlining this process a while back. You can find it here: [![](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/1X/6cc113569ef0e1a7d3a628932312e851572c1723.jpeg "Using 3rd Party CAs with Ziti CLI, and ZAC") ](https://www.youtube.com/watch?v=USMim65c4ic) The description has all the commands I ran for examples but I did it with the ziti CLI, not with ZAC. It's the same, but a bit different (CLI vs UI) but maybe it'll help. You can also find the thread about this here on discourse at > [@Creating Endpoint with your own Certificate Authority](https://openziti.discourse.group/t/creating-endpoint-with-your-own-certificate-authority/433/12): > > Ok. The video is below. The key is the name of the identity. It needed to follow the “[caName]-[commonName]” format or else it wouldn’t connect. Also the api paths were no longer valid. Good luck - hopefully this helps [[Using 3rd Party CAs with Ziti CLI, and ZAC] ](https://www.youtube.com/watch?v=USMim65c4ic) Here are the full instruction set - it’s quite long and ‘dense’… [Edited - ZITI\_PKI] # generate a new CA ca\_name="new\_ca\_$(date +"%H%M%S")" ca\_dir=${ZITI\_PKI}/$ca\_name echo "New CA is named : ${ca\_name}" echo "New CA d…