Experience Center
Deleting a Root Certificate for Isolation in Internet & SaaS
Almost all root certificates can be deleted, excluding the default Zscaler Root Certificate. This is because at least one root certificate is required per isolation profile. To learn more, see About Root Certificates in Isolation in Internet & SaaS.
Additionally, if any other root certificates are associated with an isolation profile, you cannot delete them. You must first disable the certificate from the isolation profile before deleting it. To learn more, see Editing Your Isolation Profile for Internet & SaaS.
To delete a root certificate:
- Go to Infrastructure > Internet & SaaS > Network Policies > Root Certificates.
- Click the Edit button next to the certificate.
The Edit Root Certificate window appears. In the Edit Root Certificate window:
- Click Delete. If the certificate is the default or is associated to an isolation profile, the delete button is grayed out.
- A warning message appears to confirm that you would like to delete the certificate. Click Confirm.
