Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't install a trusted certificate

I am having troubles with installing certificates in Sophos XG Home.  Ultimately, I would prefer to setup and install my own CAs(root and intermediate) and use certificate from my own CAs for the web interfaces and for SSL inspection.  I setup the root and an intermediate CA, issued a certificate for the firewall, and uploaded the certificate and configured my CAs in the CAs section, as well.  But the certificate is shown as not trusted.  After a few attempts(including making sure the entire trust chain was included in the certificate file), I decided to simply use a Let's Encrypt certificate to at least get the web interface using a proper certificate.  However, even the Let's Encrypt certificate didn't show as trusted.  After a few attempts and searching discussions, I discovered there were recent(a few months back) issues with Let's Encrypt certificates.  Even though these issues have supposedly been fixed, I decided to try a cert from a different CA.  I tried a got a certificate from ZeroSSL, and I am having the same issues:  I can install certificates, but they are never trusted by the firewall.

Is there something that I am missing?



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi GentooGeek,

    Thank you for reaching out to us and hopefully provide you better understanding on how to implement the certificate. Can you please confirm if you have follow the steps similar to the steps stated for the business account. I believe you may use it from your Sophos XG as well.

    https://support.sophos.com/support/s/article/KB-000035645?language=en_US

    If you have followed the steps and still showing untrusted, can you please provide screenshot on how you applied it from your device?

    Thanks and have a nice day!


    Best Regards,

    Benjamin S.

Reply
  • FormerMember
    0 FormerMember

    Hi GentooGeek,

    Thank you for reaching out to us and hopefully provide you better understanding on how to implement the certificate. Can you please confirm if you have follow the steps similar to the steps stated for the business account. I believe you may use it from your Sophos XG as well.

    https://support.sophos.com/support/s/article/KB-000035645?language=en_US

    If you have followed the steps and still showing untrusted, can you please provide screenshot on how you applied it from your device?

    Thanks and have a nice day!


    Best Regards,

    Benjamin S.

Children
No Data