# Install mitm-proxy root-ca on running device

**URL:** <https://forums.balena.io/t/install-mitm-proxy-root-ca-on-running-device/374767>\
**Category:** balenaOS\
**Tags:** network\
**Created:** [September 9, 2025, 7:00am UTC](https://forums.balena.io/t/install-mitm-proxy-root-ca-on-running-device/374767 "2025-09-09T07:00:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![philh](https://avatars.discourse-cdn.com/v4/letter/p/7ab992/32.png) [@philh](https://forums.balena.io/u/philh)\
**Post date:** [September 9, 2025, 7:00am UTC](https://forums.balena.io/t/install-mitm-proxy-root-ca-on-running-device/374767/1 "2025-09-09T07:00:17Z")

</div>

Good morning,

I have a running balenaOS on an PC and I am trying to install a Man-in-the-middle Proxy between the PC and the Internet. The proxy is working and the device is online and I see the traffic in my proxy.

My question is, how do I get my proxy’s root CA onto the Balena device so that I can update my containers from the registry? Because right now, I’m having the problem that I’m getting this error from Balena balena\_supervisor:

> 2025-09-09[debug] delta([node-red] [registry2.balena-cloud.com/v2/xxx@sha256:xxx](http://registry2.balena-cloud.com/v2/xxx@sha256:xxx)): Delta failed with Error: (HTTP code 500) server error - Get “[https://registry2.balena-cloud.com/v2/”:](https://registry2.balena-cloud.com/v2/%E2%80%9D:) x509: certificate signed by unknown authority

Thanks for your help

---

<div class="post-metadata">

**Author:** ![alexgg](https://avatars.discourse-cdn.com/v4/letter/a/7ab992/32.png) [@alexgg](https://forums.balena.io/u/alexgg)\
**Post date:** [September 23, 2025, 5:42pm UTC](https://forums.balena.io/t/install-mitm-proxy-root-ca-on-running-device/374767/2 "2025-09-23T17:42:26Z")

</div>

Hi, you can configure the `balenaRootCA` in your device’s `config.json` in the boot partition. See [GitHub - balena-os/meta-balena: A collection of Yocto layers used to build balenaOS images](https://github.com/balena-os/meta-balena#balenarootca) and [BalenaOS Masterclass | balena](https://docs.balena.io/learn/more/masterclasses/host-os-masterclass/#12-advanced-editing-configjson-by-hand)