A device is configured for dynamically obtaining updated hash values for certificate processing of endpoints from a dedicated and single server. The server's certificate is signed by a certificate authority that is the sole and root authority for the certificate processing on the device. When endpoints are connected to the device, the hash values are compared against computed hash values for the endpoints' certificates. Connections are deemed secure for the device when the computed hash values match the hash values provided by the server.