Configuring a SharePoint CA certificate chain

The File Protect appliance can perform malware analysis scans on accessible files stored in network shares, collaboration servers, and remote hard drives. CIFS, NFS, WebDAV, and secure WebDAV remote file access protocols are supported.

When you mount a secure WebDAV share, you must specify a SharePoint CA certificate chain. You must bundle the certificates in order: first, the root (top-level) certificate, then any intermediate certificates, and finally the endpoint (SharePoint server) being certified.

Each endpoint and intermediate certificate obtains its authority from the previous CA in the chain. The server certificate was issued by the first intermediate CA, the first intermediate certificate was issued by the second intermediate CA, and so on. The last intermediate CA was issued by the root CA. The root certificate must have a matching issuer and subject because a top-level CA authority is self-signed.

Each certificate in the chain is validated to make sure the parent-to-child progression is correct. Although authority is established within the chain, the certificates in the chain are not automatically verified and trusted by the system. You can optionally verify them as described in Manually verifying certificates.

You can include a comment string with information such as the domain and expiration date. The comment is replicated in the comment field of each member certificate.

This section describes how to configure the chain. For information about mounting file shares, see the File Protect User Guide.