Configuring Claude Code CLI

Configuring Claude Code CLI

💡
Note:
This step is only required if you are using a SASE-based deployment. If you are using the Lumia installers, no additional steps are needed to analyze Claude Code CLI.
Furthermore, this is only required for the CLI tool. Claude Web and Desktop apps work automatically.
This step is only required if you are using a SASE-based deployment. If you are using the Lumia installers, no additional steps are needed to analyze Claude Code CLI.
Furthermore, this is only required for the CLI tool. Claude Web and Desktop apps work automatically.
Claude is one of the most popular coding agents. However, to ensure it meets the security and governance standards required for enterprise deployment, additional configurations are needed.
For Claude Code CLI to function seamlessly with SASE gateways, it must be manually pointed to your SASE root certificate. This configuration provides Lumia’s Protocol Analysis Engine the visibility needed to inspect traffic without interrupting connectivity.

Implementation Steps

We recommend first validating these steps manually on a single machine. Once verified, these environment variables should be deployed organization-wide via your MDM (e.g., Jamf or Intune).

1. Locate your SASE Root Certificate

To proceed, you will need the full path to your SASE root certificate file (e.g., /Users/yourname/Downloads/cert.pem).
Follow our Locating your SASE Root Certificate guide to obtain the file before proceeding to the next step.

2. Set Environment Variables

Run the following commands in your terminal:
2.1 Enable System CA Support:
  • Windows:
    • PowerShell: [Environment]::SetEnvironmentVariable("NODE_USE_SYSTEM_CA", "1", "User")
    • CMD: setx NODE_USE_SYSTEM_CA 1
  • macOS: launchctl setenv NODE_USE_SYSTEM_CA 1
2.2 Point to your SASE Certificate:
Insert the actual file path you located in Step 1 above.
  • Windows:
    • PowerShell: [Environment]::SetEnvironmentVariable("NODE_EXTRA_CA_CERTS", "\Path\to\SASE_certificate", "User")
    • CMD: setx NODE_EXTRA_CA_CERTS "\Path\to\SASE_certificate"
  • macOS: launchctl setenv NODE_EXTRA_CA_CERTS "/Path/to/SASE_certificate"
💡
Note for macOS users:
The launchctl commands above are session-based and will reset after a system reboot. For a permanent configuration, please add these environment variables to your shell profile (e.g., .zshrc or .bash_profile).

3. Verification

To validate the configuration:
  1. Restart your terminal.
  2. Run a command in Claude Code CLI.
  3. Confirm that the tool connects and functions without certificate or connectivity errors.
  4. Return to our Getting Started guide to view setup links for other applications, or proceed to Step 1.B to complete your integration.
❓
Need assistance? If you have questions or require help with your specific configuration, please reach out to your Lumia representative.