How to upload or install a custom SSL certificate for the Juniper Security Director On-Premises GUI.

• When accessing SD On-Prem GUI version 24.4.1, users may encounter a browser warning indicating that the page is “Not secure.”. This occurs because most browsers do not trust self-signed certificates by default. SD On-Prem uses a self-signed certificate (juniper-self-signed-ca) by default, triggering this warning.

Starting with Juniper Security Director (JSD) version 25.2.2, users can install and manage their own custom SSL certificates. We recommend upgrading to JSD 25.2.2 or later to take advantage of this capability. Custom certificates can be uploaded from a local machine in X.509 or PKCS #12 format, replacing the default self-signed certificate. You can view the details of the uploaded certificate, such as name, issuer, and validity period. With this feature, you have transparency into your security settings and control over them. [See Update Server Certificate]