Trusted Certificate Authorities

1. From Strata Cloud Manager, select ConfigurationPrisma Browser PolicyControlsBrowser Security
2. Select Trusted Certificate Authorities.
3. Select the certificate authorities that are to be trusted by the Prisma Browser (this limits the trust to certificates that are already trusted):

   • Device trust store - Trust the certificate authorities installed in the device's certificate store.
   • Prisma Access Browser trust store - Trust only certificate authorities that are trusted by Palo Alto Networks, and ignores certificates installed in the Device trust store.
   • None - Do not trust certificates in any trust store.
     Prisma Browser for Mobile rules using this control must use one of the Trust Stores. The None option is ignored.
4. Additional trusted certificate authorities- Add customer-provided certificates not already trusted by the Prisma Browser.

   1. Enter a name for the certificate.
   2. Drag or Browse a certificate in .pem, .der, .crt, or .cer formats.

5. Click Set.