Create a new profile and specify its Name, Payload Description and Scope: System: Click on Certificate PKCS1 Payload, specify the certificate file and click Add: Click File → Export to save the profile to. , when you have created one root certificate with mkcert you only have to add it once to the trust stores.
In Umbrella, navigate to Deployments > Configuration > Root Certificate and click Download Certificate. Those root CA certificates are required in order to sign-in into Lync rather it’s on the internal or external network. Install root certificate mac Federal Common Policy CA (expires ) Entrust Managed Services Root CA.