On Wed, 2019-05-22 at 18:10 -0700, Lakshmi wrote: > In my setup, IMA signing key will be signed by a key in the "BuiltIn > Trusted Keys". That is exactly how it is meant to be used. In conjunction with the examples/ scripts, please follow the "Generate trusted keys" section of the README. The last two steps show how to create a certificate signing request (CSR) and sign the certificate with a CA key. The CA public key should be loaded onto the builtin keyring. Mimi