KyberGate uses HTTPS inspection to filter encrypted web traffic. This requires a CA certificate to be installed and trusted on each device.
Why a CA Certificate?
Over 95% of web traffic is encrypted with HTTPS. To inspect this traffic for harmful content, games, and safety keywords, KyberGate decrypts it at the proxy, inspects it, and re-encrypts it. The CA certificate allows devices to trust this process.
Automatic Trust (MDM Profile)
If you deploy using the KyberGate MDM profile (from /api/mdm/YOUR_ORG_ID), the CA certificate is included and automatically trusted. No additional action needed.
Manual Trust (if needed)
iPad/iPhone
Settings > General > About > Certificate Trust Settings > Enable full trust for the KyberGate CA.
macOS
Open Keychain Access > System > drag the CA cert in > double-click > Trust > set to "Always Trust."
Chromebook
The Chrome extension handles certificate trust automatically. No manual steps needed.
Download the CA Certificate
https://proxy.kybergate.com/api/ca.pem
Security Note
The KyberGate CA certificate is unique to your proxy instance. It only allows the KyberGate proxy to inspect traffic — it cannot be used by any other party.