Skip to Content

Wiki source code of REMC1 Certificate Authority

Version 13.1 by 62a391539b728c006a95cf09 on 2016/09/27 12:41
Hide last authors
Jamie Jarvi 9.1 1 {{toc/}}
steve@remc1_org 1.1 2
Jamie Jarvi 9.1 3 = {{id name="General-Info"/}}General Info =
steve@remc1_org 1.1 4
5 * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %)
7 * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
8 * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10
Jamie Jarvi 11.1 11 = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
steve@remc1_org 1.1 12
13 1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
14 1. Or email the certificate to the IOS device.(% class="anchor" %)
steve@remc1_org 3.1 15 1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
steve@remc1_org 1.1 16 1. On the IOS device tap "Install"(% class="anchor" %)
17
Jamie Jarvi 9.1 18 = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
steve@remc1_org 1.1 19
20 * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %)
21 * Add the device to wireless(% class="anchor" %)
62a39401d442e60068439d9f 7.1 22 * Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %)
steve@remc1_org 1.1 23 * Go to settings > security(% class="anchor" %)
24 * Select "Install from Storage"(% class="anchor" %)
25 * Type REMC1 and press ok.(% class="anchor" %)
26 * Go to settings > wifi(% class="anchor" %)
27 * Press & hold the staff or student network(% class="anchor" %)
28 * Tap "Modify Settings"(% class="anchor" %)
29 * Check "Show advanced settings"(% class="anchor" %)
30 * Tap "CA Certificate"(% class="anchor" %)
31 * Select the REMC1 certificate(% class="anchor" %)
32 * Tap "Save"(% class="anchor" %)
33
34 (% class="line874" %)
35 NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %)
36
Jamie Jarvi 11.1 37 = {{id name="Windows"/}}Windows =
steve@remc1_org 1.1 38
62a39401d442e60068439d9f 6.1 39 1. Download: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
steve@remc1_org 3.1 40 1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]] onto the computer missing the certificate.(% class="anchor" %)
62a39401d442e60068439d9f 8.1 41 1*. (% class="anchor" %)[[image:attach:window.PNG||height="250"]]
62a39401d442e60068439d9f 7.1 42 1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]]
steve@remc1_org 1.1 43 1. Click 'Yes'(% class="anchor" %)
62a39401d442e60068439d9f 8.1 44 1*. (% class="anchor" %)[[image:attach:install.PNG]]
steve@remc1_org 1.1 45 1. Click 'Ok'(% class="anchor" %)
46
Jamie Jarvi 12.1 47 (% class="line867" style="margin-left: 60.0px;" %)
62a39401d442e60068439d9f 8.1 48 [[image:attach:complete.PNG]](% class="anchor" %)
steve@remc1_org 1.1 49
Jamie Jarvi 11.1 50 = {{id name="Mac-OSX"/}}Mac OSX =
steve@remc1_org 1.1 51
62a39401d442e60068439d9f 7.1 52 1. Download [[REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]]
steve@remc1_org 1.1 53 1. Run the downloaded file(% class="anchor" %)
54 1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
62a39401d442e60068439d9f 8.1 55 1*. [[image:attach:installMac.png]](% class="anchor" %)
steve@remc1_org 1.1 56 1. OSX may ask for a password before it will install.(% class="anchor" %)
62a39401d442e60068439d9f 8.1 57 1*. [[image:attach:password.png]](% class="anchor" %)
steve@remc1_org 1.1 58
62a391539b728c006a95cf09 13.1 59 = {{id name="Linux/Other"/}}Linux/Other =
Jamie Jarvi 9.1 60
62a391539b728c006a95cf09 13.1 61 * If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats:
62 ** [[attach:REMC1.crt]]
63 ** [[attach:REMC1.cer]]
64 ** <link to PEM here>
Jamie Jarvi 9.1 65
steve@remc1_org 1.1 66
67
Jamie Jarvi 9.1 68 ----
steve@remc1_org 1.1 69
Jamie Jarvi 9.1 70
steve@remc1_org 1.1 71
Jamie Jarvi 9.1 72