Install the Root Certificate

To successfully enable SSL decryption or to render a block page correctly when an identity attempts to visit a blocked HTTPS website, a root certificate must be installed in all browsers on all of your managed devices. See Manage Certificates.

To enable SSL decryption you must also enable the intelligent proxy. Because most web pages are served over HTTPS, the efficacy of the intelligent proxy is increased dramatically when SSL decryption is also enabled.

For Umbrella to properly display a block page a root certificate must be installed for all browsers. When an identity visits a blocked HTTPS website, even without HTTPS inspection or SSL decryption enabled, Umbrella will not downgrade the HTTPS protocol to HTTP when serving a block page. Therefore, if a root certificate is not installed the web browser will not properly display the block page.

Steps to perform this installation procedure vary based on the operating system, browser type, and policy types. For more information and procedures, see Manage Certificates.

---

Meraki Systems Manager (SM) Deployment < Install the Root Certificate > IPv4 and IPv6 DNS Protection Status