Use this page to view, disable, or export, the pre-included certificate authorities (CAs) that the firewall trusts. The pre-installed list of CAs includes the most common and trusted certificate providers responsible for issuing the certificates the firewall requires to secure connections to the internet. For each trusted root CA, the name, subject, issuer, expiration date and validity status are displayed.

The firewall does not trust intermediate CAs by default because intermediate CAs are not a part of the chain of trust between the firewall and the trusted root CA. You must manually add any intermediate CAs that you want the firewall to trust, along with any additional trusted enterprise CAs that your organization requires (DeviceCertificate ManagementCertificatesDevice Certificates).