mTLS certificate not installing in Work Profile on Android

Website, Application, Performance Security
1

What is the name of the domain?

myexample.ca

What is the error number?

N/A

What is the error message?

N/A

What is the issue you’re encountering

mTLS Certificate not working at all in Android Work Profiles

What steps have you taken to resolve the issue?

  • tried different certificate types and stores
  • different browser (ie firefox, brave)
  • different deployment types
  • google-FU

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

Note: The mTLS certificates work just fine under desktop/laptops. It’s just Android (11, 12, 13, 14 tested) that has this issue.

  1. import the certificate into Android. (our users only have a work profile, not a personal and work profile)
  2. Verify it is identified as a user certificate in Certificates and Encryption Settings under work profile
  3. Attempt to access the mTLS protected website which requires the user certificate to be present
  4. Blocked page by Cloudflare

Note 2: if you attempt to use it on a device with Work AND Personal profiles, the certificate seems to be installed under the work profile, but actually works in the personal profile.

2

Hi there,

I noticed that you’ve already created a ticket regarding this issue. To ensure the protection of your private information, we will address your questions directly through that ticket.

Thank you

1 Like