Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


About the Certificate Authority Group Page


You are here: Device Administration > Certificate Management > Trusted Certificate Authority.

Multiple CA profiles can be grouped in one trusted CA group for a given topology. The CA group can be used either in SSL or IPsec.

SSL forward proxy ensures secure transmission of data between a client and a server. Before establishing a secure connection, SSL forward proxy checks certificate authority (CA) certificates to verify signatures on server certificates. For this reason, a reasonable list of trusted CA certificates is required to effectively authenticate servers.

You can perform the following tasks:

  • Import a CA group to manually load the CA group. See Import a Trusted CA Group.

  • Add a CA group. See Add a CA Group.


    You can group up to maximum of 20 CA profiles in a single trusted CA group. A minimum of one CA profile is a must to create a trusted CA group.

  • Edit a CA group. See Edit a CA Group.

  • Delete a CA group. See Delete CA Group.

  • Search for text in a CA group table. See Search Text in the Certificate Authority Group Table.

  • Filter the CA group information based on select criteria. To do this, select the filter icon at the top right-hand corner of the table. The columns in the grid change to accept filter options. Type the filter options; the table displays only the data that fits the filtering criteria.

  • Show or hide columns in the CA group table. To do this, use the Show Hide Columns icon in the top right corner of the page and select the options you want to show or deselect to hide options on the page.

Table 1 provides the details of the fields of the Certificate Authority Group Page.

Table 1: Fields on Certificate Authority Group Page



Group Name

Displays a Name for the CA profile group.

CA Profiles

Displays the name of CA profiles.

Used For

Displays whether the CA profile group is used for IPsec VPN or for SSL proxy.