Error: WSS SSL intercept certificate was NOT found

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

User is experiencing below SSL certificate error on WSS Agent. The issue has been seen frequently after upgrading MacOS from Catalina to Big Sur or Monterey. 

Environment

macOS Catalina, Big Sur+

WSS Agent

Cause

WSS SSL certificate was installed on macOS keychain as "login" instead of "System". The System keychain applies system wide i.e. to all users on that macOS computer while login keychain applies to individual user.  

Resolution

Installing SSL certificate under System keychain resolves the issue. Please refer apple article to install the certificate. 

Follow below procedure to manually download the WSS SSL certificate  

Login to WSS Portal  and navigate to Policy > TLS/SSL Interception > expand the TLS/SSL Interception Certificate section > click the Download button.