Wiki source code of Installing REMC1 Certificate Authority
Version 17.1 by 62a391539b728c006a95cf09 on 2016/09/27 13:43
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
| |
9.1 | 1 | {{toc/}} |
 |
1.1 | 2 | |
| |
9.1 | 3 | = {{id name="General-Info"/}}General Info = |
| |
1.1 | 4 | |
| 5 | * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %) | ||
| 6 | * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning webfilter/firewall profiles(% class="anchor" %) | ||
| 7 | * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %) | ||
| 8 | * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %) | ||
| 9 | * Chrome, IE, Safari are feasible options.(% class="anchor" %) | ||
| |
17.1 | 10 | * (% class="anchor" %)If you are a REMC1 staff member and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]] |
| |
1.1 | 11 | |
| |
11.1 | 12 | = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) = |
| |
1.1 | 13 | |
| 14 | 1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %) | ||
| 15 | 1. Or email the certificate to the IOS device.(% class="anchor" %) | ||
| |
3.1 | 16 | 1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]] |
| |
1.1 | 17 | 1. On the IOS device tap "Install"(% class="anchor" %) |
| 18 | |||
| |
9.1 | 19 | = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) = |
| |
1.1 | 20 | |
| 21 | * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %) | ||
| 22 | * Add the device to wireless(% class="anchor" %) | ||
| |
7.1 | 23 | * Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %) |
| |
1.1 | 24 | * Go to settings > security(% class="anchor" %) |
| 25 | * Select "Install from Storage"(% class="anchor" %) | ||
| 26 | * Type REMC1 and press ok.(% class="anchor" %) | ||
| 27 | * Go to settings > wifi(% class="anchor" %) | ||
| 28 | * Press & hold the staff or student network(% class="anchor" %) | ||
| 29 | * Tap "Modify Settings"(% class="anchor" %) | ||
| 30 | * Check "Show advanced settings"(% class="anchor" %) | ||
| 31 | * Tap "CA Certificate"(% class="anchor" %) | ||
| 32 | * Select the REMC1 certificate(% class="anchor" %) | ||
| 33 | * Tap "Save"(% class="anchor" %) | ||
| 34 | |||
| 35 | (% class="line874" %) | ||
| 36 | NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %) | ||
| 37 | |||
| |
11.1 | 38 | = {{id name="Windows"/}}Windows = |
| |
1.1 | 39 | |
| |
6.1 | 40 | 1. Download: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]](%%)[[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]] |
| |
3.1 | 41 | 1. Copy [[I>>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]][[attach:InstallREMCCert.exe]] onto the computer missing the certificate.(% class="anchor" %) |
| |
8.1 | 42 | 1*. (% class="anchor" %)[[image:attach:window.PNG||height="250"]] |
| |
7.1 | 43 | 1. Run: [[InstallREMCCert.exe>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851658%2FInstallREMCCert.exe||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=InstallREMCCert.exe||title="" shape="rect" class="attachment"]] |
| |
1.1 | 44 | 1. Click 'Yes'(% class="anchor" %) |
| |
8.1 | 45 | 1*. (% class="anchor" %)[[image:attach:install.PNG]] |
| |
1.1 | 46 | 1. Click 'Ok'(% class="anchor" %) |
| 47 | |||
| |
12.1 | 48 | (% class="line867" style="margin-left: 60.0px;" %) |
| |
8.1 | 49 | [[image:attach:complete.PNG]](% class="anchor" %) |
| |
1.1 | 50 | |
| |
11.1 | 51 | = {{id name="Mac-OSX"/}}Mac OSX = |
| |
1.1 | 52 | |
| |
7.1 | 53 | 1. Download [[REMC1.cer>>url:https://confluence.remc1.net/display/PS/REMC1+Certificate+Authority?preview=%2F2851652%2F2851653%2FREMC1.cer||shape="rect"]][[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.cer||title="" shape="rect" class="attachment"]] |
| |
1.1 | 54 | 1. Run the downloaded file(% class="anchor" %) |
| 55 | 1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %) | ||
| |
8.1 | 56 | 1*. [[image:attach:installMac.png]](% class="anchor" %) |
| |
1.1 | 57 | 1. OSX may ask for a password before it will install.(% class="anchor" %) |
| |
8.1 | 58 | 1*. [[image:attach:password.png]](% class="anchor" %) |
| |
1.1 | 59 | |
| |
13.1 | 60 | = {{id name="Linux/Other"/}}Linux/Other = |
| |
9.1 | 61 | |
| |
13.1 | 62 | * If you are adding this to a Linux machine (Ubuntu, Arch, Gentoo, ect.) you may need a different style of certificate. This will change depending on what version, distro, and packages are installed on the particular machine. Provided below are a few common formats: |
| 63 | ** [[attach:REMC1.crt]] | ||
| 64 | ** [[attach:REMC1.cer]] | ||
| |
14.1 | 65 | ** [[attach:remc-cert-authority-cert.pem]] |
| |
9.1 | 66 | |
| |
1.1 | 67 | |
| 68 | |||
| |
9.1 | 69 | ---- |
| |
1.1 | 70 | |
| |
9.1 | 71 | |
| |
1.1 | 72 | |
| |
9.1 | 73 |