In Administration Console, click Devices > Access Gateways > Edit > [Name of Reverse Proxy].
In the Server Certificate line, click the Browse icon to select the Access Gateway certificate.
IMPORTANT:If the external certificate authority writes the DN in reverse order (the cn element comes first rather than last), you receive an error message that the subject name does not contain the cn of the device. You can ignore this warning, if the order of the DN elements is the cause.
Specify an Alias for the certificate.
On the Server Configuration page, click Reverse Proxy / Authentication.
Update Access Gateway and Identity Server on respective pages.