---
title: "Downloading the Secure Web Gateway (SWG) root Certificate"
slug: "swg-certificate"
status: "update"
updated: 2026-04-07T09:08:34Z
published: 2026-04-07T09:08:34Z
canonical: "support.perimeter81.com/swg-certificate"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Downloading the Secure Web Gateway (SWG) root Certificate

You can download the Secure Web Gateway (SWG) root certificate and install it on macOS devices either manually or using an MDM application. The SWG root certificate is required for [Internet Access](/v1/docs/secure-web-gateway).

Notes:  
It is supported only with the Check Point SASE Agent for macOS version 10.4 and higher.  
The**Revoke**button is disabled. It will be supported in the future. 

To download the SWG root certificate:

1. Access the Check Point SASE Administrator Portal and click **Devices** > **Downloads**.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Downloads1.PNG)
2. In the **Certificates** section, click **Generate certificate**.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Downloads2.png)
3. Click **Activate** to activate the SWG root certificate.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Downloads3.png)
4. When the certificate is active, click **Download**.  
    The system downloads a PEM file.
5. Install the certificate on macOS devices either:
  - Manually
  - Using an MDM application. Refer to the MDM's documentation.Best Practice:Configure the required app permissions in the MDM so that it is installed without user intervention.