set security pki ca-profile sky-atp-ca ca-identity sky-atp-identity

set services ssl proxy profile ssl-inspect-profile trusted-ca sky-atp-ca
set services ssl proxy profile ssl-inspect-profile root-ca sky-atp-cert-id
set services ssl proxy profile ssl-inspect-profile actions ignore-server-auth-failure