If you are going to set up SSL communication between Identity Server and Access Gateway for authentication and you have configured Identity Server to use certificates created by an external CA, you need to import the public certificate of this CA into the trusted root keystore of Access Gateway.