SSL Inspection Valid CA Certificate

[vitor_ribeiro]

Hi,

Simple question: Which type of Certificate should i request to the CA for SSL Inspection ?

Thanks

[Bromont_FTNT]

A public CA won't give you the type of certificate you need.

If you have a domain environment your best bet would be to have the DC issue the certificate. IE and Chrome on domain member workstations will trust it.

[vitor_ribeiro]

So there is no way to generate a CSR and send to a VeriSign ?

So i have to install on each workstation a certificate  ??

[Rafael_Freire]

vitor.ribeiro wrote:

So there is no way to generate a CSR and send to a VeriSign ?

So i have to install on each workstation a certificate  ??

Yes , to inspect the ssl traffic you will need to install certificates on the endpoints. I think a interesting way is generate a certificate on your DC and upload with GPO on the machines.