just after I posted this got the email which confirms 🙂
In order to solve this issue, you must generate a new HTTPS inspection certificate for Harmony Connect, and make sure it’s set as a trusted CA for all your user’s devices.
Please follow the below steps:
• Navigate to the Harmony Connect admin portal.
• Go to Policy > SSL Inspection > Manage Certificates button.
• From the list of certificates:
Select an existing certificate with a valid expiration date
or
Upload your own certificate by clicking on Upload
or
Generate a new certificate by clicking on Generate New
• Set the certificate as active
The new trusted CA certificate will be automatically distributed by the Harmony Connect agent for versions 1.3.* and up. The local admins need to distribute the new certificate to all other endpoints with lower versions.