Deploy root CA /ndn by setting up the NDNCERT CA configuration and run NDNCERT service
At each site server, run NDNCERT client command line tools to get certificate issued by /ndn using the PIN code challenge, set up the CA configuration and run NDNCERT CA service.
Update the /ndn's configuration file and restart the service.