---
title: "Manage TRS Bundles"
slug: "managing-trs-bundles"
tags: ["Assurance Sensor Control", "sensor control ", "TRS", "25.07"]
updated: 2026-07-07T13:37:48Z
published: 2025-08-07T13:27:51Z
canonical: "docs.crossworkassurance.cisco.com/managing-trs-bundles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.crossworkassurance.cisco.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage TRS Bundles

A Trusted Root Store (TRS) is a set of root certificates that are trusted by operating systems, browsers, and other software to establish trust in digital certificates. Cisco provides certain TRS bundles to set up the default trusted Certificate Authorities. These bundles consist of root certificates used in Public Key Infrastructure to confirm the authenticity of digital certificates issued by different Certificate Authorities (CAs).

Cisco offerings must use the Cisco-provided Trusted Root Store bundle(s) to authenticate peers when connecting to Cisco services, downloading product updates from Cisco to perform Cisco-specific operations or, any other public, non-Cisco services on the Internet.

## Activating TRS Bundles

Select a TRS bundle to activate.

**To activate a TRS bundle:**

1. Open the Management Web Interface.
2. Navigate to **System ▶ Maintenance ▶ Certificates**.
3. In **TRS Bundle management**, from the **Activate** drop-down, select the TRS bundle.  

For more information, see [TRS Bundle Management Parameters](/v1/docs/managing-trs-bundles#trs-bundle-management-parameters).
4. Click **Submit**.  

The TRS bundle will activate after a system reboot.

          Note

          

If the certificate in the bundle expires, manually import the latest CA/intermediate certificates (as a replacement for expired CA certificate) to ensure a secure connection with the server.

For more information, see *Managing SSL/TLS Certificates*.

## Viewing TRS Bundle Details

Display the current active TRS bundle along with its supported Common Names (CN) and expiration date.

**To view TRS bundle details:**

1. Open the Management Web Interface.
2. Navigate to **System ▶ Maintenance ▶ Certificates**.
3. In **TRS Bundle management**, click **View**.  

A page will display the bundle details, including the version, supported common names, and expiration dates.

## TRS Bundle Management Parameters

![image.png](https://cdn.document360.io/01d1de5e-a375-4fbc-aa82-666ac04c2113/Images/Documentation/image-K5D7AX6O.png?sv=2026-02-06&spr=https&st=2026-11-08T11%3A29%3A41Z&se=2026-11-08T12%3A29%3A41Z&sr=c&sp=r&sig=EiMhejA5e9kr3EdQFUxg0gxS576PRFjGalRsyqw4t5A%3D)

| Parameter | Description |
| --- | --- |
| **Current Bundle** | Displays the currently-activated bundle. |
| **Activate** | Select the bundle to activate. These bundles are used for outbound connections to secure servers: - **core:** Includes the certificates necessary to connect to Cisco resources, including the main Cisco-operated roots as well as specific third-party roots that are commonly used to issue Cisco production SSL certificates, as well as the approved public CAs. **Note:** TRS Core bundle is the default activated bundle. - **fedramp:** A collection of digital certificates for use in securing federal information systems. **Note:** For systems configured to operate in FIPS mode, the FedRAMP TRS bundle is the recommended choice. |

**© 2026 Cisco and/or its affiliates. All rights reserved.** For more information about trademarks, please visit: [Cisco trademarks](https://www.cisco.com/c/en/us/about/legal/trademarks.html)[](https://www.cisco.com/c/en/us/about/legal/trademarks.html) For more information about legal terms, please visit: [Cisco legal terms](https://www.cisco.com/c/en/us/about/legal/terms-conditions.html)