You were exactly correct, thanks again! For others who might be using an NGINX proxy in front of Knox, the bolded below is what I had to add to me NGINX cfg for the proxy URL: server { listen 443 ssl; server_name PROXIED_URL; ssl on; ssl_protocols TLSv1.1 TLSv1.2; ssl_certificate /etc/ssl/private/CORPORATE_CERT.crt; ssl_certificate_key /etc/ssl/private/CORPORATE_CERT.key; location / { proxy_pass https://KNOX_HOST:8443; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_read_timeout 86400; } } ... View more