Install Cloud Root CA on Ubuntu or Debian
search cancel

Install Cloud Root CA on Ubuntu or Debian


Article ID: 171332


Updated On:


Cloud Secure Web Gateway - Cloud SWG


You are using an Ubuntu/Debian machine protected by the Web Security Service (with SSL Interception enabled) and you're facing errors when browsing HTTPS websites. This article describes steps to download and install Cloud (Threatpulse) trusted root certificate authority (CA) into Ubuntu/Debian


- The certificate is not trusted.
- Your connection is not private.
- Untrusted issuer
- Certificate unknown


  • Ubuntu/Debian (Linux)


The web browser could not find and is not trusting the Cloud Root CA when you have SSL interception enabled.


Download the Cloud Root CA from your portal and follow these steps:

  1. Create a directory for extra CA certificates in /usr/share/ca-certificates:

    sudo mkdir /usr/share/ca-certificates/extra
  2. Copy the CertEmulationCA.crt file to this directory:

    sudo cp CertEmulationCA.crt /usr/share/ca-certificates/extra/CertEmulationCA.crt
  3. Update ca-certificates configuration to include the recently imported certificate.

    sudo dpkg-reconfigure ca-certificates