---
title: "SSL Certificate for On Device Network Protection"
slug: "ssl-certificate-for-on-device-network-protection"
updated: 2024-06-04T05:08:29Z
published: 2024-06-04T05:08:29Z
canonical: "help.scalefusion.com/ssl-certificate-for-on-device-network-protection"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSL Certificate for On Device Network Protection

IT Admins using the On Device Network Protection (ONP) feature may want to deploy the SSL certificate required for the HTTPS inspection feature offered by Check Point. Scalefusion allows you to easily upload the certificate and deploy it to the target devices and/profile. Please follow the document below to deploy the SSL Certificate.

#### Step 1: Download the SSL Certificate from Infinity Portal

1. Sign In to the Infinity Portal and click on **Policy** > **Select the Profile** > **Network > Network Inspection** tab,  
![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715875742556.png)
2. From the Network Protection settings dialog, expand **HTTP Settings** and click on **Generate CA Certificate** if you have not already generated the certificate  
![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715875831082.png)
3. Once the certificate is generated, download the CA Certificate by clicking on the **Download Certificate**

**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715876626228.png)**

#### Step 2: Upload & Deploy Certificate from Scalefusion

1. Sign in to Scalefusion Dashboard and navigate to **Device Profiles & Policies > Certificate Management** and click **Upload Certificate**  
  
**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715876869548.png)**
2. Upload the certificate that you have downloaded from Infinity Portal in Step 1 and **Save**  
**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715877046069.png)**
3. Once uploaded, **Publish**the certificate to all the Device Profiles including the profiles attached with the risk groups that you may have created to identified and move the devices that have been tagged risky.
  1. The certificate can be published by clicking on **3 dots** and click on **Publish**  
**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715877847595.png)**
  2. Select the required profiles, and click **Publish**

**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1715877974837.png)**

Deploying SSL Certificates for BYO/Personal DevicesSSL certificates cannot be deployed directly to Android BYO/Personal devices and users have to download and install it on the Work-container.