# Proxy SSL Certificate Installation on SailPoint ISC VA

**URL:** <https://developer.sailpoint.com/discuss/t/proxy-ssl-certificate-installation-on-sailpoint-isc-va/157346>\
**Category:** SHF Discussion and Questions\
**Tags:** virtual-appliance, sailpoint-identity-security\
**Created:** [July 18, 2025, 7:58am UTC](https://developer.sailpoint.com/discuss/t/proxy-ssl-certificate-installation-on-sailpoint-isc-va/157346 "2025-07-18T07:58:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![longinuschanGT](https://avatars.discourse-cdn.com/v4/letter/l/779978/32.png) [@longinuschanGT](https://developer.sailpoint.com/discuss/u/longinuschanGT)\
**Post date:** [July 18, 2025, 7:58am UTC](https://developer.sailpoint.com/discuss/t/proxy-ssl-certificate-installation-on-sailpoint-isc-va/157346/1 "2025-07-18T07:58:22Z")

</div>

Hi,

We are currently trying to pair the Virtual Appliance (VA) to the Identity Service Connector (ISC) with proxy settings. While we were able to pair the VA on ISC, it is not showing a healthy status.

We are experiencing SSL certificate verification failures in our ISC VA, which we suspect is caused by the proxy’s certificate missing from the VA server. The VA operates behind a corporate proxy infrastructure, and we require guidance on properly configuring certificate trust for the VA agent.

We see the following error in the va\_agent logs:

```auto
{"@timestamp":"2025-07-09T03:14:48.756","level":"ERROR","type":"agent","message":"Poll error: RestClient::SSLCertificateNotVerified: SSL_connect returned=1 errno=0 peeraddr=<proxy ip>:<port> state=error: certificate verify failed (unable to get local issuer certificate): [\"/usr/local/bundle/gems/rest-client-2.1.0/lib/restclient/request.rb:776:in 'RestClient::Request#transmit'\", \"/usr/local/bundle/gems/rest-client-2.1.0/lib/restclient/request.rb:163:in 'RestClient::Request#execute'\", \"/usr/local/bundle/gems/rest-client-2.1.0/lib/restclient/request.rb:63:in 'RestClient::Request.execute'\", \"/opt/sailpoint/lib/v2/api.rb:145:in 'ApiServiceV2#execute_request'\", \"/opt/sailpoint/lib/v2/api.rb:41:in 'ApiServiceV2#cc_call'\", \"/opt/sailpoint/lib/api.rb:111:in 'SailPoint::API#poll'\", \"/opt/sailpoint/bin/va_agent.rb:138:in 'Object#poll_server'\", \"/opt/sailpoint/bin/va_agent.rb:280:in 'Object#are_credentials_valid?'\", \"/opt/sailpoint/bin/va_agent.rb:319:in 'Object#wait_for_valid_credentials'\", \"/opt/sailpoint/bin/va_agent.rb:599:in 'block in <main>'\", \"<internal:kernel>:168:in 'Kernel#loop'\", \"/opt/sailpoint/bin/va_agent.rb:594:in '<main>'\"]"}
{"@timestamp":"2025-07-09T03:14:48.756","level":"ERROR","type":"agent","message":"Unable to authenticate with SailPoint."}

```

Do we need to insert the proxy’s certification on VA?  
If so, may I know how?

Many thanks.

Longinus Chan

---

<div class="post-metadata">

**Author:** ![HussainshaSyed001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/hussainshasyed001/32/28234_2.png) [@HussainshaSyed001](https://developer.sailpoint.com/discuss/u/HussainshaSyed001)\
**Post date:** [July 18, 2025, 9:04am UTC](https://developer.sailpoint.com/discuss/t/proxy-ssl-certificate-installation-on-sailpoint-isc-va/157346/2 "2025-07-18T09:04:26Z")

</div>

I don’t think we do proxy imports. But we modify proxy.yml to specify the proxy server details. also it is very important to note that if you are using HTTPS connections through the proxy, we may need to ensure that the VA trusts the proxy SSL certificate and in this please import the certificate and entire key chain (Root and Intermediate Certificates) to the VA under certificates folder.

for proxy.yml see the following and search proxy.yml in doc:

> **[Configuring Virtual Appliances - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/va/config_va.html)**
>
> SailPoint Identity Services Documentation

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 16, 2025, 9:05am UTC](https://developer.sailpoint.com/discuss/t/proxy-ssl-certificate-installation-on-sailpoint-isc-va/157346/3 "2025-09-16T09:05:00Z")

</div>

Closed on September 16, 2025, 9:05am UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.