using WSA generated CSR to get sign via Public CA (GoDaddy) for HTTPS Decryption ?

[hashimwajid1]

Hi Team,

can we use WSA own self generated CSR to get sign via Public CA (GoDaddy) and use it for all Users/Contractors/Mobile devices ?

we dont have any Internal CA and want decryption for all Users Domain/Guest 

Thanks

[Rob Ingram · Accepted solution]

Hi,
No, that is not possible. When doing HTTPS/SSL Decryption, the certificate used must be a "Subordinate CA" type certificate. This certificate isn't your typical certificate and a public CA like GoDaddy isn't going to issue one.

HTH

[hashimwajid1]

Hi RJI,

thanks for the comments

then how can we achieve Decryption for Guest/Contractor without getting any certificate error. we want all Guest/Contractor traffic via Proxy only.

Thanks 

[Ken Stieers]

You have to make the cert available for them to install or not decrypt their traffic.