Best practice for gateway SSL certificates

[Fraser_Hess]

What is the best practice around the SSL certificates for Gaia Portal/Identity Awareness? Should I use the internal CA? our corporate CA? A third way? I can see advantages to either solution.

[PhoneBoy]

Gaia portal and Identity Awareness portal are two separate things.

For the Gaia (Platform) portal, the number of people accessing it are relatively small and technical in nature.
For that, just using the default self-signed certificate is fine, unless you desire something different.

The IDA portal touches a lot of users.
For that, you will want to use a cert signed by a CA the end user browsers trust.
Whether you use the ICA or an external CA...matter of preference, largely.

[Fraser_Hess]

Thank you for that advice. Just to let you know, we aren't using the Identity Awareness portal, just the agent.

And a follow-up question, if I can: if I have installed a corporate CA-issued certificate for Gaia Portal on the gateway object in SmartConsole, how can I switch to an ICA-issued certificate?