diff --git a/ssl/GNUmakefile.in b/ssl/GNUmakefile.in
index 426501e161a01876b299702f61fb3f1353a81342..ada22c2d0a01f702d7a5c17f8a69898a1fa59715 100644
--- a/ssl/GNUmakefile.in
+++ b/ssl/GNUmakefile.in
@@ -90,6 +90,9 @@ ronnode.pem:	dirsmade ronnode.cnf ca.cnf $(SRCDIR)/mkclient.sh
 pcplab.pem:		dirsmade pcplab.cnf ca.cnf $(SRCDIR)/mkclient.sh
 	$(SRCDIR)/mkclient.sh pcplab
 
+pcwa.pem:		dirsmade pcwa.cnf ca.cnf $(SRCDIR)/mkclient.sh
+	$(SRCDIR)/mkclient.sh pcwa
+
 dirsmade:
 	-mkdir -p certs
 	-mkdir -p newcerts
@@ -108,12 +111,14 @@ install:
 boss-installX:	$(INSTALL_ETCDIR)/emulab.pem \
 		$(INSTALL_ETCDIR)/server.pem \
 		$(INSTALL_ETCDIR)/pcplab.pem \
+		$(INSTALL_ETCDIR)/pcwa.pem \
 		$(INSTALL_ETCDIR)/capture.pem
 	$(INSTALL_DATA) localnode.pem $(INSTALL_ETCDIR)/client.pem
 	chmod 640 $(INSTALL_ETCDIR)/emulab.pem
 	chmod 640 $(INSTALL_ETCDIR)/server.pem
 	chmod 640 $(INSTALL_ETCDIR)/client.pem
 	chmod 640 $(INSTALL_ETCDIR)/pcplab.pem
+	chmod 640 $(INSTALL_ETCDIR)/pcwa.pem
 	chmod 640 $(INSTALL_ETCDIR)/capture.pem
 
 client-install:
diff --git a/ssl/pcwa.cnf.in b/ssl/pcwa.cnf.in
new file mode 100644
index 0000000000000000000000000000000000000000..32904aa14c805eed26e6704ed9d3fd5f14c72241
--- /dev/null
+++ b/ssl/pcwa.cnf.in
@@ -0,0 +1,26 @@
+[ req ]
+prompt                  = no
+default_bits		= 1024
+default_keyfile 	= privkey.pem
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	        = v3_ca	# The extentions to add to the self signed cert
+encrypt_key		= no
+string_mask             = nombstr
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = Utah
+L                      = Salt Lake City
+O                      = Utah Network Testbed
+# tmcd uses OU and CN for verification.
+OU                     = pcwa
+CN                     = @BOSSNODE@
+emailAddress           = @TBOPSEMAIL@
+
+[ req_attributes ]
+
+[ v3_ca ]
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid:always,issuer:always
+basicConstraints = CA:true