Enable TLS in HTTP connection with PAC

Hi Francesco,

When you select Generate certificate on-the-fly:
- SPS will generate a certificate on-the-fly for you and this certificate gets signed by a provided "Signing CA" that you select in the drop down.
- You can create a local  "Signing CA" via Policies > Signing CA
- Then select that "Signing CA" that will be used under the option "Generate certificate on-the-fly"
- SPS uses the parameters of the signing CA, excluding the CN field, which is filled with the name of the target host name.

Please see the links below from the Admin guide for more details:

Enabling One Identity Safeguard for Privileged Sessions (SPS) to act as a HTTP proxy:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.10.0/administration-guide/56#TOPIC-1629340

Signing certificates on-the-fly:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.10.0/administration-guide/53#TOPIC-1629329

Thanks!

Hi Francesco,

When you select Generate certificate on-the-fly:
- SPS will generate a certificate on-the-fly for you and this certificate gets signed by a provided "Signing CA" that you select in the drop down.
- You can create a local  "Signing CA" via Policies > Signing CA
- Then select that "Signing CA" that will be used under the option "Generate certificate on-the-fly"
- SPS uses the parameters of the signing CA, excluding the CN field, which is filled with the name of the target host name.

Please see the links below from the Admin guide for more details:

Enabling One Identity Safeguard for Privileged Sessions (SPS) to act as a HTTP proxy:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.10.0/administration-guide/56#TOPIC-1629340

Signing certificates on-the-fly:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.10.0/administration-guide/53#TOPIC-1629329

Thanks!