Skip to Content
Last modified by Jaremay Moreau on 2026/08/25 13:55
From version 13.1
edited by 62a391539b728c006a95cf09
on 2016/09/27 12:41
Change comment: There is no comment for this version
To version 3.1
edited by steve@remc1_org
on 2016/09/01 11:30
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.62a391539b728c006a95cf09
1 +XWiki.steve@remc1_org
Content
... ... @@ -1,7 +1,9 @@
1 -{{toc/}}
1 +
2 2  
3 -= {{id name="General-Info"/}}General Info =
3 +== {{id name="General-Info"/}}General Info ==
4 4  
5 +(% class="anchor" style="color: rgb(0,0,0);" %)
6 +
5 5  * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 6  * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %)
7 7  * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
... ... @@ -8,15 +8,25 @@
8 8  * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 9  * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 10  
11 -= {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
13 +(% class="line867" %)
14 +
12 12  
16 +== {{id name="IOS"/}}IOS ==
17 +
18 +(% class="anchor" style="color: rgb(0,0,0);" %)
19 +
13 13  1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
14 14  1. Or email the certificate to the IOS device.(% class="anchor" %)
15 15  1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
16 16  1. On the IOS device tap "Install"(% class="anchor" %)
17 17  
18 -= {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
25 +(% class="line867" %)
26 +
19 19  
28 +== {{id name="Android"/}}Android ==
29 +
30 +(% class="anchor" style="color: rgb(0,0,0);" %)
31 +
20 20  * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %)
21 21  * Add the device to wireless(% class="anchor" %)
22 22  * Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %)
... ... @@ -34,39 +34,50 @@
34 34  (% class="line874" %)
35 35  NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %)
36 36  
37 -= {{id name="Windows"/}}Windows =
49 +(% class="line867" %)
50 +
38 38  
39 -1. Download: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
52 +== {{id name="Windows-Instructions"/}}Windows Instructions ==
53 +
54 +(% class="anchor" style="color: rgb(0,0,0);" %)
55 +
56 +(% class="line867" %)
57 +
58 +
59 +=== {{id name="Install-the-certificate"/}}Install the certificate ===
60 +
61 +(% class="anchor" style="color: rgb(0,0,0);" %)
62 +
63 +1. Download: [[InstallREMCCert.exe>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](% class="anchor" %)
40 40  1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]] onto the computer missing the certificate.(% class="anchor" %)
41 -1*. (% class="anchor" %)[[image:attach:window.PNG||height="250"]]
42 -1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
65 +1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=window.PNG||alt="window.PNG" class="attachment"]](% class="anchor" %)
66 +1. Run: [[InstallREMCCert.exe>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](% class="anchor" %)
43 43  1. Click 'Yes'(% class="anchor" %)
44 -1*. (% class="anchor" %)[[image:attach:install.PNG]]
68 +1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=install.PNG||alt="install.PNG" class="attachment"]](% class="anchor" %)
45 45  1. Click 'Ok'(% class="anchor" %)
46 46  
47 -(% class="line867" style="margin-left: 60.0px;" %)
48 -[[image:attach:complete.PNG]](% class="anchor" %)
71 +(% class="line867" %)
72 +[[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=complete.PNG||alt="complete.PNG" class="attachment"]](% class="anchor" %)
49 49  
50 -= {{id name="Mac-OSX"/}}Mac OSX =
74 +(% class="line867" %)
75 +
51 51  
52 -1. Download [[REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]]
77 +== {{id name="Mac-OSX-instructions"/}}Mac OSX instructions ==
78 +
79 +(% class="anchor" style="color: rgb(0,0,0);" %)
80 +
81 +1. Download [[REMC1.cer>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]](% class="anchor" %)
53 53  1. Run the downloaded file(% class="anchor" %)
54 54  1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
55 -1*. [[image:attach:installMac.png]](% class="anchor" %)
84 +1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=installMac.png||alt="installMac.png" class="attachment"]](% class="anchor" %)
56 56  1. OSX may ask for a password before it will install.(% class="anchor" %)
57 -1*. [[image:attach:password.png]](% class="anchor" %)
86 +1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=password.png||alt="password.png" class="attachment"]](% class="anchor" %)
58 58  
59 -= {{id name="Linux/Other"/}}Linux/Other =
60 -
61 -* If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats:
62 -** [[attach:REMC1.crt]]
63 -** [[attach:REMC1.cer]]
64 -** <link to PEM here>
65 -
88 +(% class="line867" %)
66 66  
67 67  
68 -----
91 +== {{id name="Deploying-the-certificate"/}}Deploying the certificate ==
69 69  
70 -
93 +(% class="anchor" style="color: rgb(0,0,0);" %)
71 71  
72 -
95 +* If you are trying to mass deploy the certificate please see: [[DeployREMC1CertificateAuthority>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority||shape="rect"]]
Confluence.Code.ConfluencePageClass[0]
id
... ... @@ -1,1 +1,1 @@
1 -17179078
1 +17189515