When the Workspace ONE Access virtual appliance is configured behind a load balancer, you must establish SSL trust between the load balancer and Workspace ONE Access. The Workspace ONE Access root certificate must be copied to the load balancer.

The Workspace ONE Access root certificate can be downloaded from the Install SSL Certificates > Server Certificate page in the Workspace ONE Access administration console. See Change Appliance Configuration Settings for information about accessing appliance configuration settings pages, including the Install SSL Certificates page.

If the Workspace ONE Access FQDN points to a load balancer, the SSL certificate can only be applied to the load balancer.

Since the load balancer communicates with the Workspace ONE Access virtual appliance, you must copy the Workspace ONE Access root CA certificate to the load balancer as a trusted root certificate.


  1. Log in to the Workspace ONE Access console.
  2. Select Dashboard > System Diagnostics Dashboard.
  3. Click VA Configuration of the service node you want to configure and log in with the admin user password.
  4. Select Install SSL Certificates > Server Certificate.
  5. Click the Appliance Self Signed Root CA Certificates link.

    download certificate

    The certificate is displayed.
  6. Copy everything between and including the lines -----BEGIN CERTIFICATE----- and -----END CERTIFICATE---- and paste the root certificate into the correct location on each of your load balancers. Refer to the documentation provided by your load balancer vendor.

What to do next

Copy and paste the load balancer root certificate to the Workspace ONE Access appliance.