search cancel

Web and Cloud Access Protection is not automatically installing Web Security Services root certificate on macOS clients

book

Article ID: 253932

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

WCAP (Web and Cloud Access Protection) is not automatically installing WSS (Web Security Service) root certificate on macOS clients.

WCAP policy, when enabled, redirects network traffic from a SEP client (Symantec Endpoint Protection) to Symantec WSS

Environment

SEP for Mac with WCAP policy enabled

Cause

Starting with macOS Big Sur (macOS version 11), certificate trust requires user intervention to approve the trust of the certificate.

Resolution

Due to this new OS requirement, the recommendation for large customer rollout is to deploy the certificate through MDM (Mobile Device Management).

See the KB documents below for further instructions:

Distribute WSS Root Cert to Endpoints

Install SSL Root Certificate for Safari Browsers

Additional Information

CRE-10792