You can download Secure Socket Layer (SSL) keys to Manager for a single Sensor. Once imported to Manager, keys can be pushed to the Sensor via Configuration Update. Using provided SSL keys, a Sensor can decrypt SSL traffic for IPS inspection. Manager provides a passthru interface for you to import a set of public/private keys to the Sensor. Manager stores an escrow of the imported keys for Sensor recovery purpose. However, the Manager does not interpret the escrowed keys, nor does it attempt to recover the keys themselves in case a Sensor has lost its key encryption key. In order to protect the imported keys both in transit and in escrow, Manager uses the public key of the Sensor's public/private key pair.
Trellix IPS Manager supports PKCS12 keys with file suffixes ".pkcs12", ".p12", or ".pfx".
Select Devices → <Admin Domain Name> → Global → IPS Device Settings → SSL Decryption.
.png)
In the Inbound tab, select Internal Web Server Certificates tab.
Click Import. The Import Internal Web Server Certificates dialog box opens.
.png)
Click Choose Files.
Note
You can import up to 200 certificate files at the same time as long as they use the same passphrase.
Select the key PKCS12 File on your client system.
Type the Passphrase.
This is the phrase (export password) you used for encrypting your PKCS12 file.
Click the Installed On tab and select the Sensors that you want to push the certificates to.
.png)
Note
If you do not select any Sensors, the certificates will be pushed to all the devices connected to the Manager.
Click Import.
A pop-up window opens detailing import status.
You must do a configuration update to the Sensor for the changes to take effect.