Skip to content

Commit

Permalink
Refine banner message
Browse files Browse the repository at this point in the history
  • Loading branch information
maxvp committed Oct 18, 2024
1 parent 1392c37 commit cc2c3d7
Showing 1 changed file with 9 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,21 @@ title: User-side certificates
sidebar:
order: 4
banner:
content: The global Cloudflare root certificate will expire on 2025-02-02. If you installed the Cloudflare certificate before 2024-17-10, <a href="#generate-a-cloudflare-root-certificate">generate a new certificate</a> for your Zero Trust organization.
content: The default global Cloudflare root certificate will expire on 2025-02-02. If you installed the default Cloudflare certificate before 2024-17-10, you must <a href="#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

Advanced security features such as [HTTPS traffic inspection](/cloudflare-one/policies/gateway/http-policies/tls-decryption/), [Data Loss Prevention](/cloudflare-one/policies/data-loss-prevention/), [anti-virus scanning](/cloudflare-one/policies/gateway/http-policies/antivirus-scanning/), [Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/), and [Browser Isolation](/cloudflare-one/policies/browser-isolation/) require users to install and trust a root certificate on their device. You can either install the certificate provided by Cloudflare (default option), or generate your own custom certificate and upload it to Cloudflare.

Gateway [generates a unique root CA](#generate-a-cloudflare-root-certificate) for each Zero Trust account and deploys its across the Cloudflare global network. Alternatively, Enterprise users can upload and deploy their own [custom certificate](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/custom-certificate/).

| Deployment status | Description |
| ----------------- | ---------------------------------------------------------------------------------------------- |
| Inactive | The certificate has been uploaded to Cloudflare but is not deployed across the global network. |
| Pending | The certificate is being activated or deactivated for use. |
| Active | The certificate is deployed across the Cloudflare global network and ready to be turned on. |
| Active and In-Use | The certificate is turned on. Gateway will use the certificate for inspection. |
Zero Trust will indicate if a certificate is ready for use in inspection based on its deployment status:

| Deployment status | Description |
| ----------------- | -------------------------------------------------------------------------------------------------------------- |
| Inactive | The certificate has been generated by or uploaded to Cloudflare but is not deployed across the global network. |
| Pending | The certificate is being activated or deactivated for use. |
| Active | The certificate is deployed across the Cloudflare global network and ready to be turned on. |
| Active and In-Use | The certificate is turned on. Gateway will use the certificate for inspection. |

## Generate a Cloudflare root certificate

Expand Down

0 comments on commit cc2c3d7

Please sign in to comment.