I read about server authentication over web and got to know that issuer Root CA should be imported into Trusted Root CA on both server and client machines for mutual authentication.
Now let's say it is banking application and user connects to the bank server for the first time:
- Server returns server certificate to validate itself to client.
- Client gets the certificate and validate with trusted Root CA authority which has signed this server certificate earlier.
- Client sends its certificate and server validate with trusted Root CA authority which has signed this client certificate earlier.
- Now communication starts.
Step 3 - I understand that trusted Root CA authority installed on the server when server gets deployed.
But in step 2, as the client machine connected first time (and the user can dynamically connect from any machine), how did Root CA authority get installed on the client machine?