For the complete documentation index, see llms.txt. This page is also available as Markdown.

Fixing SSL/TLS Certificate Errors

Device Protection proxies your traffic through a local CA certificate. The following tools are configured automatically at install:

  • Node.js, npm

  • Python (pip, Poetry, uv)

  • Ruby (Bundler, RubyGems)

  • Java (all JDKs discovered at install time)

  • git, curl

  • Homebrew, Bazel, Nix (macOS)

  • JetBrains IDEs, Android Studio, DBeaver

  • Firefox

  • macOS System Keychain / Windows Certificate Store

Don't see your tool? Contact support, we'll look into adding automatic support for it.

If you need to fix it yourself in the meantime, use the information below.

Unsupported tools

The CA certificate is stored at:

/Library/Application Support/AikidoSecurity/EndpointProtection/run/endpoint-protection-proxy-ca-crt.pem

Follow your tool's documentation for adding a custom CA certificate.

Last updated

Was this helpful?