Push the Umbrella Certificate to Managed Devices

To support the display of block pages for HTTPS sites, HTTPS decryption if the Intelligent Proxy is used, and Trusted Network Detection if a VA is present, you must push the Umbrella certificate to each of your managed devices.

Prerequisites

• Full admin access to the Umbrella dashboard. See Manage User Roles.

Procedure

1. Navigate to Deployments > Configuration > Root Certificate.

2. Expand Cisco Root Certificate Authority and download the Cisco Umbrella root certificate.
   For more information about installing the root certificate, see Install the Cisco Umbrella Root Certificate.

3. Push the root certificate to all your devices from the MDM admin panel so that block pages can be displayed.
   This allows block pages for HTTPS sites to appear correctly, enables HTTPS decryption if the Intelligent Proxy is used, and enables Trusted Network Detection if a VA is present.

Note: If there is an Umbrella VA in your network and you want to use Trusted Network Detection, configure the VA as detailed in Umbrella Virtual Appliance: Receiving user-IP mappings over a secure channel.

Troubleshooting < Push the Umbrella Certificate to Devices > Configure Cellular and Wifi Domains