> Source: [sk179817](https://support.checkpoint.com/results/sk/sk179817)

# sk179817 - How to install Check Point's SSL certificate before activating Full SSL Inspection in Harmony Connect

| Property | Value |
|----------|-------|
| Solution ID | sk179817 |
| Date Created | 2022-08-17 |
| Last Modified | 2023-04-30 |
| Technical Level | General |
| OS | Windows |

## Symptoms

- "This site is not secured" message appears for all sites after activating Full SSL inspection in Harmony Connect.

## Cause

You have not installed the SSL certificate before activating Full SSL Inspection.

## Solution

1. If you are not able to access the **SSL Inspection** tab on the computer you are trying to install the certificate, make sure that the you have set SSL inspection to **Basic Inspection** in the Harmony Connect Administrator Portal.  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/0 IMPORTANT202208161248352.png)  

   If not, install a new policy and set the SSL inspection level to **Basic Inspection** .  

2. Download the Check Point's SSL certificate.  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/1202208161248583.png)
3. Open the downloaded certificate.  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/2202208161249144.png)
4. Click **Install Certificate** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/3202208161249295.png)
5. Click **Local Machine** to install the certificate to all users on the machine and click **Next** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/4202208161250096.png)
6. Click **Place all certificates in the following store** and and click **Browse** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/5202208161250247.png)
7. Scroll down and click **Third Party Root Certification Authorities** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/6202208161250488.png)
8. Verify that the correct store is selected and **Next** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/7202208161251129.png)
9. Follow steps 3, 4 and 5 but this time choose **Trusted Root Certification Authorities** .  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/82022081612513210.png)
10. Click **Next** and complete the installation.   

    ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1660643178040/92022081612515111.png)

The certificate is installed and activates Full SSL Inspection.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content