Experience Center
Adding Root Certificates for Isolation in Internet & SaaS
The default Zscaler Root Certificate is deployed automatically as a placeholder root certificate for any new isolation profile. However, you can add your own root certificates to use for isolation profiles instead.
To add an Internet & SaaS root certificate:
- Go to Infrastructure > Internet & SaaS > Network Policies > Root Certificates.
- Click Add Root Certificate.
The Add Root Certificate window appears. - In the Add Root Certificate window:
- Enter a Name.
- For the Type of certificate, select Browser Isolation from the drop-down menu.
Browse your computer to choose a PEM file for the Content.
- Click Save. The new root certificate appears in the page list.
You can add up to 10 root certificates for your organization. When added, you can edit a root certificate that is not the default and not associated with an isolation profile.
To deploy root certificates to isolation profiles, see Creating Isolation Profiles for Internet & SaaS and Editing Your Internet & SaaS Isolation Profile.