Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


ca-profile (Services)


Hierarchy Level


Specify the certificate authority (CA) of the certificate that the SRX Series Firewall should use in communications with an Infranet Enforcer. The SRX Series Firewall uses the CA to validate the IC Series UAC Appliance server certificate.

Use this statement if you have loaded certificates from multiple certificate authorities (CAs) onto your SRX Series Firewall and you need to configure the device to act as a Junos OS Enforcer in a Unified Access Control (UAC) deployment. When deployed as a Junos OS Enforcer, the SRX Series Firewall enforces the policies that are defined on the UAC’s IC Series appliance .

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.4.