Web Security - Managing the Mimecast SSL Certificate

This article explains how to install the Mimecast SSL certificate to be able to display block and warning pages for sites using SSL and is intended for use by Administrators.

To display block and warning pages for sites using SSL (Secure Sockets Layer, a standard security technology for establishing an encrypted link between a server and a client) and to access sites that meet the proxy criteria using SSL, you will need to install a Mimecast SSL Certificate.

Installing the Mimecast SSL Certificate

You can install a Mimecast SSL Certificate using the following steps:

1. Log on to the Mimecast Administration Console.
2. Navigate to Web Security | Certificate and DNS Setup.
3. Click on Download Certificate.
4. Check that the SHA-256 hash downloaded to your computer matches the code displayed in the console.

• • • On Windows machines, use the get-filehash PowerShell command. See the Get-FileHash page of the Microsoft Windows PowerShell help for further details.
    • On Mac machines, use the openssl dgst terminal command. See Verifying Checksums When You Download an App for further information.

5.   Deploy the Mimecast SSL Certificate in your organization. Refer to the installation guide for your operating system and browser.

If you install the Mimecast Security Agent, the software automatically installs the Mimecast SSL Certificate into your system's keychain/certification root. See the Browser Recommendations section of Mimecast Security Agent for Windows or Mimecast Security Agent for Mac.

If you aren't installing the Mimecast Security Agent endpoint software, you must install the Mimecast certificate to provide network-level protection for HTTPS websites.

For detailed information on how to configure, optimize, integrate, and troubleshoot, see the Web Security Enablement Hub.