Access Gateway can be configured to use certificates for SSL communication with two types of entities:
Client Browsers: You can enable SSL communication between client browsers and Access Gateway. When setting up this feature, you can have the Access Manager Appliance CA automatically generate a certificate key or you can select a certificate key you have already imported (or created) for the reverse proxy. To manage this certificate in the Administration Console, click Access Gateways > [Configuration Link] > [Name of Reverse Proxy]. For more information, see Managing Reverse Proxies and Authentication.
Protected Web Servers: You can enable SSL communication between Access Gateway and the protected web servers. This option is available only when you enable SSL communication between browsers and Access Gateway. You can enable SSL or mutual SSL. To manage these certificates in Administration Console, click Access Gateways > [Configuration Link] > [Name of Reverse Proxy] > [Name of Proxy Service] > Web Servers. For more information, see Configuring Web Servers of a Proxy Service.