Use this procedure if you want to configure mutual authentication for the tunnel.
Obtain and download the PKCS#12 certificate for the Branch Session Manager and copy it on the edge Branch Session Manager server.
At the command prompt of the edge Branch Session Manager server, run the following command to import the PKCS#12 file:
ADDITIONAL INFORMATION:
certTool -i tunnel.p12 -s tunnel
When prompted, type the password of the PKCS#12 file.
Next steps
If the file contains the root CA certificate, the root CA certificate is automatically installed in the trust store of the tunnel. Otherwise, manually install the root CA certificate in the trust store of the tunnel.
