CMP: add support for genm with rootCaCert and genp with rootCaKeyUpdate