// Module included in the following assemblies:
//
// * virt/live_migration/virt-about-mtv-providers.adoc

:_mod-docs-content-type: PROCEDURE
[id="virt-configuring-root-ca-for-providers_{context}"]
= Configuring the root certificate authority for providers

[role="_abstract"]
You must configure an {product-title} provider for each cluster that you are including in a migration, and each provider requires a certificate authority (CA) for the cluster. Configure the root CA for the entire cluster to avoid CA expiration, which causes the provider to fail.

.Procedure

. Run the following command against the cluster for which you are creating the provider:
+
[source,terminal]
----
$ oc get cm kube-root-ca.crt -o=jsonpath={.data.ca\\.crt}
----

. Copy the printed certificate.

. In the {mtv-first} web console, create a provider and select *{VirtProductName}*.

. Paste the certificate into the *CA certificate* field, as shown in the following example:
+
[source,terminal]
----
-----BEGIN CERTIFICATE-----
<CA_certificate_content>
-----END CERTIFICATE-----
----
