icon-zia.svg
Secure Internet and SaaS Access (ZIA)

About Root Certificates

If you are using a third-party proxy service or isolated browser, Zscaler provides administrators with the capability to upload root certificates of their choice to use for successful SSL inspection.

The Root Certificates page provides the following benefits and enables you to:

  • Upload custom root certificates of the third-party proxy service to sign the MITM certificates.
  • Upload and associate custom root certificates with the isolation profiles that are created on the ZIA Admin Portal. The isolation browser trusts all the well-known certificate authorities trusted by Chromium.

About the Root Certificates Page

On the Root Certificates page (Administration > Root Certificates), you can do the following:

  1. View the list of all configured root certificates. For each root certificate, you can view the following details:
  • Certificate Name: The name of the root certificate.
  • Uploaded on: The uploaded date and time of the root certificate.
  • Expiration Date: The expiration date and time of the root certificate.
  • Type: The type of root certificate.
  1. Search for a root certificate.
  2. Customize the columns for the list.
  3. Add a new root certificate.
  4. Edit or delete any root certificates that are not the default root certificate.
  5. Download any root certificates that are not the default root certificate.
  6. Click to view the full details for the default root certificate.

Screenshot of the Root Certificates in the ZIA Admin Portal

Related Articles
About Root CertificatesAdding Root CertificatesEditing Root CertificatesDeleting Root Certificates