I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs)
Although I deployed the root certificate to all clients, and chrome/IE work correctly, Firefox maintains its own certificate store independent of Windows.
I want to only ask the helpdesk to import the Root certificate, and not the Ironport intermediate cert into the Firefox trusted store. I assume that the problem here is similar to other website issues where the device isn't sending "linked/chained" certificates (e.g. sending the root cert inline with the HTTPS Stream)
Since the ironport UI only allows the import of a PEM format certificate, is there any way I can make the ironport send the entire HTTPS public chain to browsers, rather than just the last-mile certificate?