Upload CA Certificates
When configuring Skyhigh Mobile Cloud Security, you need to upload a certificate that was issued by a certificate authority (CA) to Secure Web Gateway. You can also upload more than one certificate.
The CA certificate is needed to set up and run a secure tunnel between the mobile devices and the VPN gateway that separates them from Secure Web Gateway and the Internet.
-
The VPN gateway uses this certificate to validate the signed mobile device certificates that are submitted when web traffic is routed through the secure tunnel.
-
The certificates that the mobile devices submit have been signed by the Mobile Device Management (MDM) server, which uses the CA certificate to sign them.
When you have uploaded the first CA certificate, the IP address of the VPN gateway is displayed on the user interface. Save this address to have it available when you configure the Mobile Device Management server.
To upload a CA certificate, complete these steps:
- On the user interface for Secure Web Gateway, place your mouse pointer over the settings icon in the top right corner, then select Infrastructure > Web Gateway Setup from the drop-down menus.
-
On the setup main page, go to the {{mcsprod}} section and click Configure.
-
On the MCS Configuration page, click Upload, then using the file manager on your system that opens browse to a CA certificate file and upload it. Repeat this step if you want to upload more than one certificate.
-
(Optional). To upload certificate chains with both Root and Intermediate certificates:
-
You must upload both the Root and Intermediate CA's to Secure Web Gateway.
-
Make sure that the p12 certificate to be deployed on your device is signed by both the Root and Intermediate CAs.
-
-
Click Save.
You have now uploaded at least one CA certificate and made it available for use in your Skyhigh Mobile Cloud Security solution.