> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Export a PKIaaS CA trust chain

If you want to use your smart credential to perform Microsoft Windows Login, you need to import the CA certificate into the Windows Domain Controller. Use this procedure to export that CA certificate so that you have it available to import into the domain controller.

1. Log in to your Identity as a Service administrator account.
2. Click Menu icon **>** **Resources > Certificate Authorities**. The **Certificate Authorities List** page appears.
3. Click Cloud Download icon next to the certificate to export the certificate trust chain. The **Export PKIaaS CA Certificate** dialog box appears.
4. Do one of the following:
   - Click **Certificate** to export the issuing CA.
   - Click **Root CA Certificate** to export the root CA.
   - Click **Certificate Chain** to export both the issuing CA certificate and the root CA.
5. Click **Export**.