---
title: "How do I resolve certificate errors seen in browsers?"
canonical: "https://docs.aryaka.com/space/KNOW/1269596205/How%20do%20I%20resolve%20certificate%20errors%20seen%20in%20browsers%3F"
format: markdown
---
This topic includes questions users often ask about certificate messages and errors and what to do to resolve the issue. Note that the component descriptions included in the responses can vary depending on your operating system and browser type and version.

### Why do I see a *Certificate is Issued by an Untrusted Authority* message in my browser?

Aryaka performs SSL interception of your HTTPS traffic for two main reasons:

- To perform SSL inspection to determine if security rule enforcement is required
- Performance enhancement using compression and deduplication of your SSL-encrypted traffic

To achieve this, Aryaka mimics the original server certificate and issues it to your users. This mimicked certificate is signed by a certificate authority chain that is also signed by an Aryaka certificate authority or your own enterprise certificate authority. Typically, if this message appears, it is because your users are missing the signing certificate authority’s public certificate in their trust chain.

### How do I avoid this *Untrusted Authority* message?

Confirm that the issuer of the certificate displayed to your users is either Aryaka or your enterprise’s certificate authority as follows.

1. Click the icon next to the URL in your browser’s Address field to determine that the connection is not secure. This icon varies by browser, but is typically a lock or warning icon.
2. Click the **Connection is Not Secure** link to display details about the certificate and the issuer.
  - If the certificate issuer is Aryaka, the issuer field in the certificate displays the following chain. Continue with step 3.
  - If the certificate issuer is your enterprise’s certificate authority, propagate the enterprise’s trust chain to your users who report seeing the certificate message.
  - If the certificate issuer displayed in your browser is Unknown, escalate to [support@aryaka.com](mailto:support@aryaka.com).
3. Log in to MyAryaka, navigate to **Global Settings** > **Vault** > **Certificate Authority** and confirm that the current certificate authority is Aryaka.
4. Click **Download Aryaka Trust Chain** and configure each of your clients to trust the Aryaka certificates.

> ⚠️ You can use tools like Microsoft Intune, Active Directory’s Group Policy, or Jamf Pro to distribute trusted root certificates to client computers.