Skip to Content
Version 23.1 by Josh Hiner on 2017/03/08 08:17
Show last authors
1 {{toc/}}
2
3 = {{id name="General-Info"/}}General Info =
4
5 * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %)
7 * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
8 * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 * (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
11
12 = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
13
14 1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
15 1. Or email the certificate to the IOS device.(% class="anchor" %)
16 1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
17 1. On the IOS device tap "Install"(% class="anchor" %)
18
19 = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
20
21 * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities.(% class="anchor" %)
22 * Add the device to wireless(% class="anchor" %)
23 * Download [[attach:REMC1.cer]] and copy it to the root of the SD card.(% class="anchor" %)
24 * Go to settings > security(% class="anchor" %)
25 * Select "Install from Storage"(% class="anchor" %)
26 * Type REMC1 and press ok.(% class="anchor" %)
27 * (% class="anchor" %)Enable screen locking (needed in android 6.0)
28 * Go to settings > wifi(% class="anchor" %)
29 * Press & hold the staff or student network(% class="anchor" %)
30 * Tap "Modify Settings"(% class="anchor" %)
31 * Check "Show advanced settings"(% class="anchor" %)
32 * Tap "CA Certificate"(% class="anchor" %)
33 * Select the REMC1 certificate(% class="anchor" %)
34 * Tap "Save"(% class="anchor" %)
35
36 (% class="line874" %)
37 NOTE: You may need to turn wifi off and back on for the settings to take effect.(% class="anchor" %)
38
39 = {{id name="Windows"/}}Windows =
40
41 1. Download: [[attach:REMC1CertSFX.exe]]
42 1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate.
43 1. Run: [[attach:REMC1CertSFX.exe]]
44 1. When asked to extract, pick a place on your hard disk.
45 [[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]]
46 1. Navigate to that location and run "InstallREMC1CertVersion6.exe"
47 [[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]]
48 1. When finished press enter:
49 [[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]]
50
51 = {{id name="Mac-OSX"/}}Mac OSX =
52
53 1. Download [[attach:REMC1.cer]]
54 1. Run the downloaded file(% class="anchor" %)
55 1. In the window that pops up, change "Keychain" to "System"(% class="anchor" %)
56 1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)
57 1. OSX may ask for a password before it will install.(% class="anchor" %)
58 1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]](% class="anchor" %)
59
60 = {{id name="Windows-AD-Server/Group-policy/Linux/Other"/}}Windows AD Server/Group policy/Linux/Other =
61
62 * Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc..
63 ** [[attach:REMC1.crt]]
64 ** [[attach:REMC1.cer]]
65 ** [[attach:remc-cert-authority-cert.pem]]
66
67 \\
68
69 ----
70
71 \\
72
73 \\