The CA certificates in the Cloud Workload Protection servers have been updated to DigiCert Global Root G2. If this CA certificate is not installed on a Linux system, the Cloud Workload Protection agent will be unable to establish an SSL connection with the Cloud Workload Protection server. For example, the agent enrollment will fail.
The DigiCert Global Root G2 certificate is relatively new and it may not be present in older Linux images available with the cloud vendors.
Determining if you already have the CA certificate installed
Use the following command on the Linux instances to determine if the DigiCert Global Root G2 CA certificate installed: