Basic Machine Cert inspection in APM Policy

Thanks Kevin, thats where I thought the problem has been - no trusted CA to actually verify the cert it see.

The issue I am having with the process now is when I create a CA profile, in the drop down of Trusted Certificate Authorities, I can see the list of all my device certs and chain certs but when I select one and goto save the profile, the selection in that dropdown just reverts back to "none" every time.

I am running an older version of software (11.1 HF4) so I might have get an outage to update the software to see if this is a bug in this version.