If your organization use its own PKI infrastructure, it is possible to upload a certificate, so axis will use that in order to serve block pages or SSL inspect traffic.

Uploading a CA certificate in the Axis Management Console

1. Log into Axis Management Console
2. Navigate to Settings->Certificates

3. Click on the CA Certificates tab and then click on the “Upload Certificate” button

4. Provide a Certificate Name and optional Description in the Upload Certificate form
5. Next, click on the Upload Certificate button in the form. This will open a file selection dialog, where the CA certificate file can be selected. The CA certificate file must be in .PFX format for import

6. After selecting the appropriate CA certificate file, enter the file password if needed. Confirm that the dialog box provides the green “Certificate OK” then select Submit.

7. Now Apply Changes.

Configuring the uploaded CA certificate for SSL inspection

1. In the CA Certificates tab, hover the mouse pointer over the uploaded certificate to bring up the info icon at the far right of the row.

2. Click on the info icon to display the certificate’s information form. On the form, click the “Use This Certificate for SSL Inspection” button to designate that this certificate should be used for SSL inspection. Then complete the CA certificate assignment by clicking the “OK” button.

3. Apply Changes.

Obtaining a CA Certificate

Example: From existing PKI infrastructure (Windows Server)

1. Connect to the Windows CA Server that issued the CA certificate that will be used for SSL Inspection
2. Open the Certificate management and locate the certificate

3. Right Click the cert and choose All Tasks -> Export

4. Select Yes to export the Private Key

5. Choose Personal Information Exchange if not already selected

6. Enter Password for certificate file if required
7. Save the certificate
8. Upload the Certificate to the Axis Management console by following the steps in the “Uploading a CA certificate in the Axis Tenant” section above.