• Capture Client
• Overview
  • Description
  • Navigation
  • Guide Conventions
• Scopes and Policies
  • Introducing Scope of Operations
  • Using Scope Selector
  • Policy Management
    • Inheritance
    • Policy Types
      • Client Policies
      • Threat Protection Policies
      • Trusted Certificate Policies
      • Web Content Filtering Policies
      • Managing Blacklist
      • Exclusions
        • Hashes
        • Paths
        • Signer Identity
        • File Types
        • Browsers
    • Replicating Policies
    • Group Ranking Policy
    • Creating Custom Policies for Device Groups
    • Device Control
• Protection
  • Tenant Token
  • Installation for the New Clients
  • Migrating Clients Across Regions
  • Protecting Devices
  • Reviewing Registered Devices
    • List View
    • Unmanaged List View
    • Map
  • Active Users
  • Performing System Scan
• Groups
  • Creating a Static User Group
  • Creating Static Device Groups
  • Creating Dynamic Device Groups
  • Creating Custom Rules for Dynamic Groups
• SonicWall Support
  • About This Document

Trusted Certificate Policies

Trust Certificates is another agent Capture Client offers for protection. To view the Trusted Certificates policies, navigate to Policies > Trusted Certificates. The Trusted Certificates page shows trusted certificates parameters used in your environment.

To define a Trusted Certificate policy

1. Log into the Client Management Console and select the appropriate scope to define a trusted certificate policy.
2. Disable inheritance if enabled.

3. Add or remove certificates in the NATIVE OS TRUST by enabling or disabling the Windows Certificate Store and or macOS Keychain options.

   By default, Windows Certificate Store and macOS Keychain options are enabled by default.

4. Define Firefox support in the FIREFOX BROWSER TRUST section, if needed. Select from the following:

   • Trust certificates in Firefox certificate store
   • Configure Firefox to trust OS certificate store
   • None

5. To add certificates to the ENFORCED CERTIFICATES section, click Upload Certificates, browse the file, and click Upload.

6. Enable the switch if you want to Retain trust when Capture Client is uninstalled.
7. Click Update.