Apply Workspace ONE Access Root Certificate to the Load Balancer

When the Workspace ONE Access virtual appliance is configured behind a load balancer, you must establish SSL trust between the load balancer and Workspace ONE Access. The Workspace ONE Access root certificate must be copied to the load balancer.

The Workspace ONE Access root certificate can be downloaded from the Install SSL Certificates > Server Certificate page in the Workspace ONE Access administration console. See Change the Workspace ONE Access Appliance Configuration Settings for information about accessing appliance configuration settings pages, including the Install SSL Certificates page.

If the Workspace ONE Access FQDN points to a load balancer, the SSL certificate can only be applied to the load balancer.

Since the load balancer communicates with the Workspace ONE Access virtual appliance, you must copy the Workspace ONE Access root CA certificate to the load balancer as a trusted root certificate.

Procedure

1. Log in to the Workspace ONE Access console.
2. Select Dashboard > System Diagnostics Dashboard.
3. Click VA Configuration of the service node you want to configure and log in with the admin user password.
4. Select Install SSL Certificates > Server Certificate.
5. Select Auto Generate Certificate (self-signed)
6. If applicable, provide the appropriate SAN entries in the Subject Alternative Names text box.
   If SSL is not terminated on the load balancer, the SSL certificate used by the service must include Subject Alternative Names (SANs) for each of the fully qualified domain names in the Workspace ONE Access cluster. Including the SAN enables the nodes within the cluster to make requests to each other. Also include a SAN for the FQDN host name that users use to access the Workspace ONE Access service, in addition to using it for the Common Name, because some browsers require it.
7. Click the Appliance Self Signed Root CA Certificates link.
   
   

   

   
   
   The certificate is displayed.
8. Copy everything between and including the lines -----BEGIN CERTIFICATE----- and -----END CERTIFICATE---- and paste the root certificate into the correct location on each of your load balancers. Refer to the documentation provided by your load balancer vendor.

What to do next

Copy and paste the load balancer root certificate to the Workspace ONE Access appliance.