r own individually generated root certificate-authorities. For multi-cluster, we
must manually configure a shared root of trust. Follow Plug-in Certs below or read <a href=/v1.10/docs/ops/deployment/deployment-models/#identity-and-trust-models>Identity and Trust Models</a>
to learn more.</p><p><strong>Plug-in Certs:</strong></p><p>To verify certs are configured correctly, you can compare the root-cert in each cluster:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ diff \
   &lt;(k