About root CA certificates of Azure Stack
To interact with the external entities and to establish secure communication, if the Azure Stack deployment is done using private CA certificate, then you need to install those certificates in Resiliency Platform.
If the Azure Stack deployment is done using public CA certificate, then you need not install any certificates.
Install Azure Stack certificate in Resiliency Platform
After the certificate is downloaded successfully, navigate to Settings >> Product Settings >> Certificate Management to install the certificate for Azure Stack cloud configuration. Refer See Add root and intermediate CA certificate. topic.