Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

Internet Access TLS inspection policies

This page's changes and edits · All guidance changes

Microsoft's edit ·

Add Microsoft-managed TLS certificate configuration guidance (#14252)

Microsoft's commit message in MicrosoftDocs/entra-docs · commit b24d2c6 · +4 −3 lines · also on GitHub

⋯ 2 unchanged lines
33 description: Learn how to configure a Transport Layer Security inspection policy and assign it to users in your organization.
44 ms.topic: how-to
55 ms.reviewer: teresayao
6 −ms.date: 04/18/2026
6 +ms.date: 08/28/2026
77
88
99 #customer intent: As a Global Secure Access administrator, I want to configure a context-aware Transport Layer Security inspection policy and assign the policy to users in my organization.
⋯ 5 unchanged lines
1515
1616 ## Prerequisites
1717 To complete the steps in this process, you must have the following prerequisites in place:
18 −- Completed TLS inspection settings with an active, enabled certificate authority.
18 +- An active, enabled certificate authority. Configure either a [Microsoft-managed certificate](how-to-transport-layer-security-settings-managed-certificate.md) or [your own certificate](how-to-transport-layer-security-settings.md).
1919 - Test devices or virtual machines running Windows that are either Microsoft Entra joined or hybrid joined to your organization's Microsoft Entra ID.
2020 - A trial license for Microsoft Entra Internet Access.
2121 - [Global Secure Access prerequisites](how-to-configure-web-content-filtering.md)
⋯ 67 unchanged lines
8989 1. Select **Delete**.
9090
9191 ## Related content
92 −* [Configure TLS inspection settings](how-to-transport-layer-security-settings.md)
92 +- [Configure TLS inspection with a Microsoft-managed certificate](how-to-transport-layer-security-settings-managed-certificate.md)
93 +- [Configure TLS inspection with your own certificate](how-to-transport-layer-security-settings.md)
9394 * [Create a TLS certificates using ADCS](scripts/powershell-active-directory-certificate-service.md)
9495 * [Create a TLS certificate using OpenSSL](scripts/powershell-open-secure-sockets-layer.md)
9596 * [What is Transport Layer Security inspection?](concept-transport-layer-security.md)
⋯ 2 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:39 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current