Skip to Content
Last modified by Jaremay Moreau on 2026/08/25 13:55
From version 31.1
edited by Eric Kemppainen
on 2021/12/23 05:25
Change comment: There is no comment for this version
To version 13.1
edited by 62a391539b728c006a95cf09
on 2016/09/27 12:41
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -Installing REMC1 Certificate Authority
1 +REMC1 Certificate Authority
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.ekemppainen@remc1_org
1 +XWiki.62a391539b728c006a95cf09
Content
... ... @@ -3,11 +3,10 @@
3 3  = {{id name="General-Info"/}}General Info =
4 4  
5 5  * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 -* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %)
6 +* All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %)
7 7  * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
8 8  * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 9  * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 -* (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
11 11  
12 12  = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
13 13  
... ... @@ -14,74 +14,60 @@
14 14  1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
15 15  1. Or email the certificate to the IOS device.(% class="anchor" %)
16 16  1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
17 -1. On the IOS device tap "Install"
18 -1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
16 +1. On the IOS device tap "Install"(% class="anchor" %)
19 19  
20 20  = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
21 21  
22 -* Connect to LTE internet if possible, alternatively download the certificate onto a laptop and connect the phone with a USB cable.
23 -* Download [[attach:REMC1.cer]] and copy it to a secure location on the phone
24 -(% style="text-align: left;" %)
25 -** (% style="color: rgb(255,0,0);" %)**IMPORTANT: **(% style="color: rgb(255, 0, 0); color: rgb(0, 0, 0)" %)We recommend(%%) moving this to a folder other than downloads. If you delete the above file, you will lose your connection to the wifi and have to do this process again.
26 -* Follow the directions on [[Connect Device to Wireless>>url:https://confluence.remc1.net/display/PS/Connect+Device+to+Wireless||shape="rect"]] to complete the connection
20 +* NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %)
21 +* Add the device to wireless(% class="anchor" %)
22 +* Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %)
23 +* Go to settings > security(% class="anchor" %)
24 +* Select "Install from Storage"(% class="anchor" %)
25 +* Type REMC1 and press ok.(% class="anchor" %)
26 +* Go to settings > wifi(% class="anchor" %)
27 +* Press & hold the staff or student network(% class="anchor" %)
28 +* Tap "Modify Settings"(% class="anchor" %)
29 +* Check "Show advanced settings"(% class="anchor" %)
30 +* Tap "CA Certificate"(% class="anchor" %)
31 +* Select the REMC1 certificate(% class="anchor" %)
32 +* Tap "Save"(% class="anchor" %)
27 27  
28 28  (% class="line874" %)
29 -NOTE: You may need to turn wifi off and back on for the settings to take effect.
35 +NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %)
30 30  
31 -= {{id name="Windows---Without-Administrator"/}}Windows - Without Administrator =
37 += {{id name="Windows"/}}Windows =
32 32  
33 -1. Download: [[attach:REMC1.cer]]
34 -1. Open up the certificate by double clicking on the downloaded file and choosing **Open**
35 -\\ [[image:attach:Downloads.PNG||height="250"]][[image:attach:Open.PNG||height="250"]]
36 -\\
37 -1. On the Certificate information window that opens up choose **Install Certificate...** at the bottom of the window
38 -\\[[image:attach:Install.PNG||height="400"]]
39 -\\
40 -1. Go through the wizard, accepting the default options
41 -\\[[image:attach:Install2.PNG||thumbnail="true" height="250"]][[image:attach:Install3.PNG||thumbnail="true" height="250"]][[image:attach:Install4.PNG||thumbnail="true" height="250"]][[image:attach:Finished.PNG]]
42 -\\
43 -1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
39 +1. Download: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
40 +1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]] onto the computer missing the certificate.(% class="anchor" %)
41 +1*. (% class="anchor" %)[[image:attach:window.PNG||height="250"]]
42 +1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
43 +1. Click 'Yes'(% class="anchor" %)
44 +1*. (% class="anchor" %)[[image:attach:install.PNG]]
45 +1. Click 'Ok'(% class="anchor" %)
44 44  
45 -= {{id name="Windows-–-Requires-Administrator-Privileges"/}}Windows – Requires Administrator Privileges =
47 +(% class="line867" style="margin-left: 60.0px;" %)
48 +[[image:attach:complete.PNG]](% class="anchor" %)
46 46  
47 -1. Download: [[attach:REMC1CertSFX.exe]]
48 -1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate
49 -1. Run: [[attach:REMC1CertSFX.exe]]
50 -1. When asked to extract, pick a place on your hard disk
51 -[[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]]
52 -1. Navigate to that location and run "InstallREMC1CertVersion6.exe"
53 -[[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]]
54 -\\
55 -1. When finished press enter:
56 -[[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]]
57 -\\
58 -1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
59 -
60 60  = {{id name="Mac-OSX"/}}Mac OSX =
61 61  
62 -1. Download [[attach:REMC1.cer]]
63 -1. Run the downloaded file
64 -1. In the window that pops up, change "Keychain" to "System"
65 -1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)\\
66 -1. OSX may ask for a password before it will install
67 -1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]]
68 -1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
52 +1. Download [[REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]]
53 +1. Run the downloaded file(% class="anchor" %)
54 +1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
55 +1*. [[image:attach:installMac.png]](% class="anchor" %)
56 +1. OSX may ask for a password before it will install.(% class="anchor" %)
57 +1*. [[image:attach:password.png]](% class="anchor" %)
69 69  
70 -= {{id name="Google-Chrome-Console"/}}Google Chrome Console =
59 += {{id name="Linux/Other"/}}Linux/Other =
71 71  
72 -* [[https:~~/~~/support.google.com/chrome/a/answer/6342302?hl=en>>url:https://support.google.com/chrome/a/answer/6342302?hl=en||shape="rect"]]
73 -
74 -= {{id name="Certificate-Download---Windows-AD-Server/Group-policy/Linux/Other"/}}Certificate Download - Windows AD Server/Group policy/Linux/Other =
75 -
76 -* Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc..
61 +* If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats:
77 77  ** [[attach:REMC1.crt]]
78 78  ** [[attach:REMC1.cer]]
79 -** [[attach:remc-cert-authority-cert.pem]]
64 +** <link to PEM here>
80 80  
81 -\\
66 +
82 82  
83 83  ----
84 84  
85 -\\
70 +
86 86  
87 -\\
72 +
Confluence.Code.ConfluencePageClass[0]
id
... ... @@ -1,1 +1,1 @@
1 -17186443
1 +17179078
title
... ... @@ -1,1 +1,1 @@
1 -Installing REMC1 Certificate Authority
1 +REMC1 Certificate Authority