Adding new certificate authorities

Use the page Configure > SSL > Certificates > Add Root CA to manually import additional certificate authorities. Certificates that you import manually have a default status of allow.


	Important It is recommended that you back up your current certificates before making any changes, such as adding or deleting certificates. See Backing up certificates. If you want to back up your entire Content Gateway configuration, see Saving and restoring configurations.

Click Browse to navigate through the directory structure to find certificates. Look for files that have a ".cer" extension. The certificate must be in X.509 format and base64-encoded.

Click Add Certificate Authority.

If the import was successful, check that the new certificate is listed on Configure > SSL > Certificates > Certificate Authorities.

New CAs are also added when users visit a site signed by that authority. These certificates may be allowed or denied. See Change the allow/deny status of a certificate for additional information.