Skip to Content
Last modified by Jaremay Moreau on 2026/08/25 13:55
From version 2.1
edited by steve@remc1_org
on 2016/09/01 11:27
Change comment: There is no comment for this version
To version 24.1
edited by 62a391516a7b750068a46920
on 2017/11/10 06:08
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -REMC1 Certificate Authority
1 +Installing REMC1 Certificate Authority
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.steve@remc1_org
1 +XWiki.62a391516a7b750068a46920
Content
... ... @@ -1,40 +1,30 @@
1 -
1 +{{toc/}}
2 2  
3 -== {{id name="General-Info"/}}General Info ==
3 += {{id name="General-Info"/}}General Info =
4 4  
5 -(% class="anchor" style="color: rgb(0,0,0);" %)
6 -
7 7  * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
8 -* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %)
6 +* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %)
9 9  * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
10 10  * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
11 11  * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 +* (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
12 12  
13 -(% class="line867" %)
14 -
12 += {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
15 15  
16 -== {{id name="IOS"/}}IOS ==
17 -
18 -(% class="anchor" style="color: rgb(0,0,0);" %)
19 -
20 20  1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
21 21  1. Or email the certificate to the IOS device.(% class="anchor" %)
22 -1. Download the REMC1 .crt certificate file with the IOS device: {{view-file att--filename="REMC1.cer" height="250"/}}(% class="anchor" %)
16 +1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
23 23  1. On the IOS device tap "Install"(% class="anchor" %)
24 24  
25 -(% class="line867" %)
26 -
19 += {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
27 27  
28 -== {{id name="Android"/}}Android ==
29 -
30 -(% class="anchor" style="color: rgb(0,0,0);" %)
31 -
32 32  * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %)
33 33  * Add the device to wireless(% class="anchor" %)
34 -* Download [[REMC1.cer>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]] and copy it to the root of the SD card.(% class="anchor" %)
23 +* Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %)
35 35  * Go to settings > security(% class="anchor" %)
36 36  * Select "Install from Storage"(% class="anchor" %)
37 37  * Type REMC1 and press ok.(% class="anchor" %)
27 +* (% class="anchor" %)Enable screen locking (needed in android 6.0)
38 38  * Go to settings > wifi(% class="anchor" %)
39 39  * Press & hold the staff or student network(% class="anchor" %)
40 40  * Tap "Modify Settings"(% class="anchor" %)
... ... @@ -46,50 +46,48 @@
46 46  (% class="line874" %)
47 47  NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %)
48 48  
49 -(% class="line867" %)
50 -
39 += {{id name="Windows---Without-Administrator"/}}Windows - Without Administrator =
51 51  
52 -== {{id name="Windows-Instructions"/}}Windows Instructions ==
41 +1. Download: [[attach:REMC1.cer]]
42 +1. Open up the certificate by double clicking on the downloaded file and choosing **Open**.
43 + [[image:attach:Downloads.PNG||height="250"]][[image:attach:Open.PNG||height="250"]]
44 +1. On the Certificate information window that opens up choose **Install Certificate...** at the bottom of the window.
45 +\\[[image:attach:Install.PNG||thumbnail="true" height="250"]]
46 +1. Go through the wizard, accepting the default options.
47 +[[image:attach:Install2.PNG||thumbnail="true" height="250"]][[image:attach:Install3.PNG||thumbnail="true" height="250"]][[image:attach:Install4.PNG||thumbnail="true" height="250"]][[image:attach:Finished.PNG||thumbnail="true" height="171"]]
53 53  
54 -(% class="anchor" style="color: rgb(0,0,0);" %)
49 += {{id name="Windows---Requires-Administrator-Privileges"/}}Windows - Requires Administrator Privileges =
55 55  
56 -(% class="line867" %)
57 -
51 +1. Download: [[attach:REMC1CertSFX.exe]]
52 +1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate.
53 +1. Run: [[attach:REMC1CertSFX.exe]]
54 +1. When asked to extract, pick a place on your hard disk.
55 +[[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]]
56 +1. Navigate to that location and run "InstallREMC1CertVersion6.exe"
57 +[[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]]
58 +1. When finished press enter:
59 +[[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]]
58 58  
59 -=== {{id name="Install-the-certificate"/}}Install the certificate ===
61 += {{id name="Mac-OSX"/}}Mac OSX =
60 60  
61 -(% class="anchor" style="color: rgb(0,0,0);" %)
62 -
63 -1. Download: [[InstallREMCCert.exe>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](% class="anchor" %)
64 -1. Copy [[InstallREMCCert.exe>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]] onto the computer missing the certificate.(% class="anchor" %)
65 -1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=window.PNG||alt="window.PNG" class="attachment"]](% class="anchor" %)
66 -1. Run: [[InstallREMCCert.exe>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](% class="anchor" %)
67 -1. Click 'Yes'(% class="anchor" %)
68 -1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=install.PNG||alt="install.PNG" class="attachment"]](% class="anchor" %)
69 -1. Click 'Ok'(% class="anchor" %)
70 -
71 -(% class="line867" %)
72 -[[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=complete.PNG||alt="complete.PNG" class="attachment"]](% class="anchor" %)
73 -
74 -(% class="line867" %)
75 -
76 -
77 -== {{id name="Mac-OSX-instructions"/}}Mac OSX instructions ==
78 -
79 -(% class="anchor" style="color: rgb(0,0,0);" %)
80 -
81 -1. Download [[REMC1.cer>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]](% class="anchor" %)
63 +1. Download [[attach:REMC1.cer]]
82 82  1. Run the downloaded file(% class="anchor" %)
83 83  1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
84 -1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=installMac.png||alt="installMac.png" class="attachment"]](% class="anchor" %)
66 +1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)
85 85  1. OSX may ask for a password before it will install.(% class="anchor" %)
86 -1*. [[image:url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=get&target=password.png||alt="password.png" class="attachment"]](% class="anchor" %)
68 +1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]](% class="anchor" %)
87 87  
88 -(% class="line867" %)
89 -
70 += {{id name="Windows-AD-Server/Group-policy/Linux/Other"/}}Windows AD Server/Group policy/Linux/Other =
90 90  
91 -== {{id name="Deploying-the-certificate"/}}Deploying the certificate ==
72 +* Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc..
73 +** [[attach:REMC1.crt]]
74 +** [[attach:REMC1.cer]]
75 +** [[attach:remc-cert-authority-cert.pem]]
92 92  
93 -(% class="anchor" style="color: rgb(0,0,0);" %)
77 +\\
94 94  
95 -* If you are trying to mass deploy the certificate please see: [[DeployREMC1CertificateAuthority>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority||shape="rect"]]
79 +----
80 +
81 +\\
82 +
83 +\\
Confluence.Code.ConfluencePageClass[0]
id
... ... @@ -1,1 +1,1 @@
1 -17189005
1 +17179262
title
... ... @@ -1,1 +1,1 @@
1 -REMC1 Certificate Authority
1 +Installing REMC1 Certificate Authority