Changes for page Installing REMC1 Certificate Authority
Last modified by Jaremay Moreau on 2026/08/25 13:55
From version 11.1
edited by Jamie Jarvi
on 2016/09/20 03:57
on 2016/09/20 03:57
Change comment:
There is no comment for this version
To version 24.1
edited by 62a391516a7b750068a46920
on 2017/11/10 06:08
on 2017/11/10 06:08
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
-
Objects (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 -REMC1 Certificate Authority 1 +Installing REMC1 Certificate Authority - Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki. jamie@remc1_org1 +XWiki.62a391516a7b750068a46920 - Content
-
... ... @@ -3,10 +3,11 @@ 3 3 = {{id name="General-Info"/}}General Info = 4 4 5 5 * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %) 6 -* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %) 6 +* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %) 7 7 * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %) 8 8 * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %) 9 9 * Chrome, IE, Safari are feasible options.(% class="anchor" %) 10 +* (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]] 10 10 11 11 = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) = 12 12 ... ... @@ -23,6 +23,7 @@ 23 23 * Go to settings > security(% class="anchor" %) 24 24 * Select "Install from Storage"(% class="anchor" %) 25 25 * Type REMC1 and press ok.(% class="anchor" %) 27 +* (% class="anchor" %)Enable screen locking (needed in android 6.0) 26 26 * Go to settings > wifi(% class="anchor" %) 27 27 * Press & hold the staff or student network(% class="anchor" %) 28 28 * Tap "Modify Settings"(% class="anchor" %) ... ... @@ -34,36 +34,48 @@ 34 34 (% class="line874" %) 35 35 NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %) 36 36 37 -= {{id name="Windows"/}}Windows = 39 += {{id name="Windows---Without-Administrator"/}}Windows - Without Administrator = 38 38 39 -1. Download: [[ InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]40 -1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title=""shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]]ontothecomputer missing thecertificate.(%class="anchor"%)41 - 1*.(%class="anchor"%)[[image:attach:window.PNG||height="250"]]42 -1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(%class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title=""shape="rect"class="attachment"]]43 - 1. Click 'Yes'(%class="anchor"%)44 -1 *.(%class="anchor"%)[[image:attach:install.PNG]]45 - 1.Click'Ok'(%class="anchor"%)41 +1. Download: [[attach:REMC1.cer]] 42 +1. Open up the certificate by double clicking on the downloaded file and choosing **Open**. 43 + [[image:attach:Downloads.PNG||height="250"]][[image:attach:Open.PNG||height="250"]] 44 +1. On the Certificate information window that opens up choose **Install Certificate...** at the bottom of the window. 45 +\\[[image:attach:Install.PNG||thumbnail="true" height="250"]] 46 +1. Go through the wizard, accepting the default options. 47 +[[image:attach:Install2.PNG||thumbnail="true" height="250"]][[image:attach:Install3.PNG||thumbnail="true" height="250"]][[image:attach:Install4.PNG||thumbnail="true" height="250"]][[image:attach:Finished.PNG||thumbnail="true" height="171"]] 46 46 47 -(% class="line867" %) 48 -[[image:attach:complete.PNG]](% class="anchor" %) 49 += {{id name="Windows---Requires-Administrator-Privileges"/}}Windows - Requires Administrator Privileges = 49 49 51 +1. Download: [[attach:REMC1CertSFX.exe]] 52 +1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate. 53 +1. Run: [[attach:REMC1CertSFX.exe]] 54 +1. When asked to extract, pick a place on your hard disk. 55 +[[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]] 56 +1. Navigate to that location and run "InstallREMC1CertVersion6.exe" 57 +[[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]] 58 +1. When finished press enter: 59 +[[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]] 60 + 50 50 = {{id name="Mac-OSX"/}}Mac OSX = 51 51 52 -1. Download [[ REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]]63 +1. Download [[attach:REMC1.cer]] 53 53 1. Run the downloaded file(% class="anchor" %) 54 54 1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %) 55 -1*. [[image:attach:installMac.png]](% class="anchor" %) 66 +1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %) 56 56 1. OSX may ask for a password before it will install.(% class="anchor" %) 57 -1*. [[image:attach:password.png]](% class="anchor" %) 68 +1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]](% class="anchor" %) 58 58 59 -= {{id name="Dep loying-the-certificate"/}}Deployingthecertificate=70 += {{id name="Windows-AD-Server/Group-policy/Linux/Other"/}}Windows AD Server/Group policy/Linux/Other = 60 60 61 -* If you are trying to mass deploy the certificate please see: [[DeployREMC1CertificateAuthority>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority||shape="rect"]] 72 +* Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc.. 73 +** [[attach:REMC1.crt]] 74 +** [[attach:REMC1.cer]] 75 +** [[attach:remc-cert-authority-cert.pem]] 62 62 63 - 77 +\\ 64 64 65 65 ---- 66 66 67 - 81 +\\ 68 68 69 - 83 +\\
- Confluence.Code.ConfluencePageClass[0]
-
- id
-
... ... @@ -1,1 +1,1 @@ 1 -1717 80281 +17179262 - title
-
... ... @@ -1,1 +1,1 @@ 1 -REMC1 Certificate Authority 1 +Installing REMC1 Certificate Authority