Android mobile app not trusting internal root cert

Avatar
  • Open

Our ScreenConnect server is behind an nginx reverse proxy when being accessed from the public Internet. That nginx server uses a certificate from Let's Encrypt. That all works fine. However, access while on the LAN connects to the server directly, and such access uses a certificate which has been issued by our internal certificate authority. Again, that all works fine.... except in the Android mobile app. The mobile app does not seem to trust the certificate, despite the certificate being installed on the phone. The certificate is trusted by Chrome and Edge... but not the actual ScreenConnect app.

ScreenConnect offical AppChrome for AndroidEdge for Android
Off-LAN (Let's Encrypt)Works!Works!Works!
On-LAN (Internal CA cert)Doesn't workWorks!Works!

Am I missing something obvious? Anyone know of a way to get the app to trust the certificates which have been installed on the OS?