Skip to Content

Installing REMC1 Certificate Authority

Version 19.1 by steve@remc1_org on 2016/10/31 12:14

General Info

  • In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert. 
  • All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles 
  • To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section. 
  • Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). Uninstall firefox. 
  • Chrome, IE, Safari are feasible options.  
  • If you are a REMC1 staff member and are looking for methods to deploy the certificate please read this page: Methods to Deploy REMC1 Certificate Authority

iOS (iPad, iPod, iPhone)

  1. Visit this website with the IOS device on Guest Wireless (or from home etc). 
  2. Or email the certificate to the IOS device. 
  3. Download the REMC1 .crt certificate file with the IOS device:  
  4. On the IOS device tap "Install"  

Android 

  • NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.  
  • Add the device to wireless 
  • Download REMC1.cer and copy it to the root of the SD card. 
  • Go to settings > security 
  • Select "Install from Storage" 
  • Type REMC1 and press ok. 
  • Go to settings > wifi 
  • Press & hold the staff or student network 
  • Tap "Modify Settings" 
  • Check "Show advanced settings" 
  • Tap "CA Certificate" 
  • Select the REMC1 certificate 
  • Tap "Save"  

NOTE: You may need to turn wifi off and back on for the settings to take effect.  

Windows

  1. Download: REMC1CertSFX.exe
  2. Copy REMC1CertSFX.exe onto the computer missing the certificate.
  3. Run: REMC1CertSFX.exe
  4. When asked to extract, pick a place on your hard disk.
    extract.PNG
  5. Navigate to that location and run "InstallREMC1CertVersion6.exe"
    run.PNG
  6. When finished press enter:
    enter.PNG

Mac OSX

  1. Download REMC1.cer
  2. Run the downloaded file 
  3. In the window that pops up, change "Keychain" to "System" 
    • installMac.png 
  4. OSX may ask for a password before it will install. 
    • password.png  

Linux/Other

  • If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats: