Uploading CA Certificates
CA (Certificate Authority) certificates are used as trust anchors to validate client and server certificates during the TLS handshake.
In mTLS configurations, CA certificates are used to:
- Validate client certificates (Client to Proxy)
- Validate backend server certificates (Proxy to Server)
Steps
- Navigate to Certificates in the Threat Protection portal.
- Select the CA Certificates tab.
- Click New and choose Certificate Authority (CA) certificate.
- Upload your PEM-formatted CA certificate.
- (Optional) Upload a Certificate Revocation List (CRL).
- Click Save.
Result
The CA certificate appears in the list with:
- Common Name
- Created date
- Expiration date
The CA is now available for use in downstream and upstream mTLS configurations.