For Workspace ONE Access on-premises deployments, the Cert Proxy service must be set up on the Workspace ONE Access machines to configure mobile single sign-on for Android devices.

The Workspace ONE Access cert proxy service is installed by default when you install Workspace ONE Access. You must enable and configure the Workspace ONE Access cert proxy service on the virtual appliances after Workspace ONE Access service is installed.