We moved ZCM Server to new hardware. We use internal CA. When we want to register XP or WS 2003 in zone error occured.

Error in the TLS certificate chain. Message: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider..
If I try to register manually (zac reg http://my_primary_server_dns) message about untrusted certificate appear with question to its import.

What I need to do to fix this issue.

Maybe import certificete before register? And where obtain *.cer file to import?