Manage the Secure Access Root Certificate

The Cisco Secure Access root certificate is essential for Cisco Secure Access to proxy and decrypt HTTPS traffic.

The Secure Access Root certificate is needed for two main functions, displaying block pages when a user visits a blocked HTTPS domain and enabling HTTPS decryption and inspection without causing browser errors.

Certificate Installation Methods

Certificate installation can be done on a per-browser or per-machine basis. For larger deployments, you can perform an automatic installation through Group Policy Objects (GPO). Note that the automatic installation through GPO is only supported for the Edge or Chrome browsers on Windows systems. As such, for Firefox or Safari browsers, and for users on non-Windows operating systems, you must perform the manual installation procedure.

You can also install a certificate automatically—through Active Directory Group Policy Objects—for a group of users in Microsoft Windows Active Directory. This automatic installation of a certificate is only supported for Edge or Chrome browsers on Windows systems. For all other browsers and systems, you must perform the manual installation procedure.

For more information, see Install the Cisco Secure Access Root Certificate.

Install the Cisco Umbrella Root Certificate< Manage the Secure Access Root Certificate > Install the Cisco Secure Access Root certificate