For Workspace ONE Access on-premises deployments, the cert proxy service must be set up on the Workspace ONE Access appliance to configure mobile single sign-on for Android devices.
When you install the Workspace ONE Access appliance, the cert proxy service is installed by default. You enable and configure the cert proxy service on the virtual appliances after the Workspace ONE Access service is installed.