Skip to Content
Last modified by Jaremay Moreau on 2026/08/25 13:55
From version 17.1
edited by 62a391539b728c006a95cf09
on 2016/09/27 13:43
Change comment: There is no comment for this version
To version 23.1
edited by Josh Hiner
on 2017/03/08 08:17
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.62a391539b728c006a95cf09
1 +XWiki.josh@remc1_org
Content
... ... @@ -3,11 +3,11 @@
3 3  = {{id name="General-Info"/}}General Info =
4 4  
5 5  * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 -* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %)
6 +* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %)
7 7  * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
8 8  * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 9  * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 -* (% class="anchor" %)If you are a REMC1 staff member and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
10 +* (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
11 11  
12 12  = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
13 13  
... ... @@ -24,6 +24,7 @@
24 24  * Go to settings > security(% class="anchor" %)
25 25  * Select "Install from Storage"(% class="anchor" %)
26 26  * Type REMC1 and press ok.(% class="anchor" %)
27 +* (% class="anchor" %)Enable screen locking (needed in android 6.0)
27 27  * Go to settings > wifi(% class="anchor" %)
28 28  * Press & hold the staff or student network(% class="anchor" %)
29 29  * Tap "Modify Settings"(% class="anchor" %)
... ... @@ -37,37 +37,36 @@
37 37  
38 38  = {{id name="Windows"/}}Windows =
39 39  
40 -1. Download: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
41 -1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]] onto the computer missing the certificate.(% class="anchor" %)
42 -1*. (% class="anchor" %)[[image:attach:window.PNG||height="250"]]
43 -1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
44 -1. Click 'Yes'(% class="anchor" %)
45 -1*. (% class="anchor" %)[[image:attach:install.PNG]]
46 -1. Click 'Ok'(% class="anchor" %)
41 +1. Download: [[attach:REMC1CertSFX.exe]]
42 +1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate.
43 +1. Run: [[attach:REMC1CertSFX.exe]]
44 +1. When asked to extract, pick a place on your hard disk.
45 +[[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]]
46 +1. Navigate to that location and run "InstallREMC1CertVersion6.exe"
47 +[[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]]
48 +1. When finished press enter:
49 +[[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]]
47 47  
48 -(% class="line867" style="margin-left: 60.0px;" %)
49 -[[image:attach:complete.PNG]](% class="anchor" %)
50 -
51 51  = {{id name="Mac-OSX"/}}Mac OSX =
52 52  
53 -1. Download [[REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]]
53 +1. Download [[attach:REMC1.cer]]
54 54  1. Run the downloaded file(% class="anchor" %)
55 55  1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
56 -1*. [[image:attach:installMac.png]](% class="anchor" %)
56 +1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)
57 57  1. OSX may ask for a password before it will install.(% class="anchor" %)
58 -1*. [[image:attach:password.png]](% class="anchor" %)
58 +1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]](% class="anchor" %)
59 59  
60 -= {{id name="Linux/Other"/}}Linux/Other =
60 += {{id name="Windows-AD-Server/Group-policy/Linux/Other"/}}Windows AD Server/Group policy/Linux/Other =
61 61  
62 -* If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats:
62 +* Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc..
63 63  ** [[attach:REMC1.crt]]
64 64  ** [[attach:REMC1.cer]]
65 65  ** [[attach:remc-cert-authority-cert.pem]]
66 66  
67 -
67 +\\
68 68  
69 69  ----
70 70  
71 -
71 +\\
72 72  
73 -
73 +\\
Confluence.Code.ConfluencePageClass[0]
id
... ... @@ -1,1 +1,1 @@
1 -17180020
1 +17179243