RS: Add rladmin cluster config s3_ca_cert step to import/export/backup DB

content/operate/rs/databases/import-export/export-data.md

@@ -160,13 +160,25 @@ To export data to an [Amazon Web Services](https://aws.amazon.com/) (AWS) Simple
 
     - In the **Secret access key** field, enter the secret access key.
 
-You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate. To connect to an S3-compatible storage location, run [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate.
 
-```sh
-rladmin cluster config s3_url <URL>
-```
+To connect to an S3-compatible storage location:
+
+1. Configure the S3 URL with [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+
+    ```sh
+    rladmin cluster config s3_url <URL>
+    ```
+
+    Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+
+1. Configure the S3 CA certificate:
+
+    ```sh
+    rladmin cluster config s3_ca_cert <filepath>
+    ```
 
-Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+    Replace `<filepath>` with the location of the S3 CA certificate `ca.pem`.
 
 ### Google Cloud Storage
 

content/operate/rs/databases/import-export/import-data.md

@@ -155,13 +155,25 @@ In the Redis Enterprise Software Cluster Manager UI, when you enter the export l
 
 - In the **Secret access key** field, enter the secret access key.
 
-You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate. To connect to an S3-compatible storage location, run [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate.
 
-```sh
-rladmin cluster config s3_url <URL>
-```
+To connect to an S3-compatible storage location:
+
+1. Configure the S3 URL with [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+
+    ```sh
+    rladmin cluster config s3_url <URL>
+    ```
+
+    Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+
+1. Configure the S3 CA certificate:
+
+    ```sh
+    rladmin cluster config s3_ca_cert <filepath>
+    ```
 
-Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+    Replace `<filepath>` with the location of the S3 CA certificate `ca.pem`.
 
 ### Google Cloud Storage
 

content/operate/rs/databases/import-export/schedule-backups.md

@@ -209,13 +209,25 @@ To store backups in an Amazon Web Services (AWS) Simple Storage Service (S3) [bu
 
     - In the **Secret Access Key** field, enter the secret access key.
 
-You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate. To connect to an S3-compatible storage location, run [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+You can also connect to a storage service that uses the S3 protocol but is not hosted by Amazon AWS. The storage service must have a valid SSL certificate.
 
-```sh
-rladmin cluster config s3_url <URL>
-```
+To connect to an S3-compatible storage location:
+
+1. Configure the S3 URL with [`rladmin cluster config`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/config">}}): 
+
+    ```sh
+    rladmin cluster config s3_url <URL>
+    ```
+
+    Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+
+1. Configure the S3 CA certificate:
+
+    ```sh
+    rladmin cluster config s3_ca_cert <filepath>
+    ```
 
-Replace `<URL>` with the hostname or IP address of the S3-compatible storage location.
+    Replace `<filepath>` with the location of the S3 CA certificate `ca.pem`.
 
 ### Google Cloud Storage
 

content/operate/rs/references/rest-api/objects/cluster/_index.md

@@ -58,6 +58,7 @@ An API object that represents the cluster.
 | <span class="break-all">proxy_max_ccs_disconnection_time</span> | integer | Cluster-wide proxy timeout policy between proxy and CCS |
 | rack_aware | boolean | Cluster operates in a rack-aware mode (read-only) |
 | reserved_ports | array of strings | List of reserved ports and/or port ranges to avoid using for database endpoints (for example `"reserved_ports": ["11000", "13000-13010"]`) |
+| s3_ca_cert | string | Filepath to the PEM-encoded CA certificate to use for validating TLS connections to the S3 server |
 | s3_url | string | Specifies the URL for S3 export and import |
 | saslauthd_ldap_conf | string | saslauthd LDAP configuration |
 | sentinel_cipher_suites | array | Specifies the list of enabled ciphers for the sentinel service. The supported ciphers are those implemented by the [cipher_suites.go](<https://golang.org/src/crypto/tls/cipher_suites.go>) package. |