Set up an HTTPS certificate authority

You’ll need to set up a certificate authority (CA) to manage networks and monitor traffic for your ChromeOS devices. It’s important to set up a CA to ensure that your users can access websites that have digital certificates that can be validated by a specific CA. This should be done early during your deployment to ensure that users can access websites without issues.

Step 1: Set up a CA in your Admin console

You can add up to 50 certificates in each organizational unit.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesNetworks.
3. Go to Certificates.
4. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
5. Click Create certificate.
6. For Certificate, enter a name for the certificate.
7. Click Upload.
8. Select the PEM, CRT, or CER file.
   Note: Only one certificate can be included in the file. The file will be rejected if it contains no certificate or more than one certificate. DER-encoded certificates are not supported. 
9. Click Open.
10. For Certificate Authority, select the platforms that the certificate is a CA for.
11. Click Add.

Step 2: Verify the CA on managed ChromeOS devices

1. Go to chrome://settings.
2. On the left, click Privacy and security.
3. Click Security.
4. Scroll to Advanced.
5. Click Manage certificates.
6. In the list, find the newly-added CAs.