When configuring an External CA, can I just copy my rootcert.der file from my CA server to the ZCM server and browse and select it or do I actually need to browse to the server and select it?

If this is a stupid question please forgive me, I do not know if there are any other processes happening in the background that might need communication with the external CA.

Thanks in advance.