Wiki source code of Installing REMC1 Certificate Authority
Version 27.1 by Josh Hiner on 2020/09/25 08:16
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
| |
9.1 | 1 | {{toc/}} |
 |
1.1 | 2 | |
| |
9.1 | 3 | = {{id name="General-Info"/}}General Info = |
| |
1.1 | 4 | |
| 5 | * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %) | ||
| |
20.1 | 6 | * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %) |
| |
1.1 | 7 | * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %) |
| 8 | * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %) | ||
| 9 | * Chrome, IE, Safari are feasible options.(% class="anchor" %) | ||
| |
20.1 | 10 | * (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]] |
| |
1.1 | 11 | |
| |
11.1 | 12 | = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) = |
| |
1.1 | 13 | |
| 14 | 1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %) | ||
| 15 | 1. Or email the certificate to the IOS device.(% class="anchor" %) | ||
| |
3.1 | 16 | 1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]] |
| |
26.1 | 17 | 1. On the IOS device tap "Install" |
| 18 | 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection | ||
| |
1.1 | 19 | |
| |
9.1 | 20 | = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) = |
| |
1.1 | 21 | |
| |
26.1 | 22 | * NOTE: These instructions were written for an HTC One VX, with Sense UI, running Android 4.1.2. Different manufacturers/UI variants and different versions of Android (especially android 2.1 or lower) may have different methods for adding certificate authorities. |
| 23 | * Add the device to wireless | ||
| 24 | * Download [[attach:REMC1.cer]] and copy it to the root of the SD card | ||
| 25 | * Go to settings > security | ||
| 26 | * Select "Install from Storage" | ||
| 27 | * Type REMC1 and press 'OK' | ||
| |
22.1 | 28 | * (% class="anchor" %)Enable screen locking (needed in android 6.0) |
| |
26.1 | 29 | * Go to settings > wifi |
| 30 | * Press & hold the staff or student network | ||
| 31 | * Tap "Modify Settings" | ||
| 32 | * Check "Show advanced settings" | ||
| 33 | * Tap "CA Certificate" | ||
| 34 | * Select the REMC1 certificate | ||
| 35 | * Tap "Save" | ||
| 36 | * Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection | ||
| |
1.1 | 37 | |
| 38 | (% class="line874" %) | ||
| |
26.1 | 39 | NOTE: You may need to turn wifi off and back on for the settings to take effect. |
| |
1.1 | 40 | |
| |
24.1 | 41 | = {{id name="Windows---Without-Administrator"/}}Windows - Without Administrator = |
| |
1.1 | 42 | |
| |
24.1 | 43 | 1. Download: [[attach:REMC1.cer]] |
| |
26.1 | 44 | 1. Open up the certificate by double clicking on the downloaded file and choosing **Open** |
| |
25.1 | 45 | \\ [[image:attach:Downloads.PNG||height="250"]][[image:attach:Open.PNG||height="250"]] |
| 46 | \\ | ||
| |
26.1 | 47 | 1. On the Certificate information window that opens up choose **Install Certificate...** at the bottom of the window |
| |
25.1 | 48 | \\[[image:attach:Install.PNG||height="400"]] |
| 49 | \\ | ||
| |
26.1 | 50 | 1. Go through the wizard, accepting the default options |
| |
25.1 | 51 | \\[[image:attach:Install2.PNG||thumbnail="true" height="250"]][[image:attach:Install3.PNG||thumbnail="true" height="250"]][[image:attach:Install4.PNG||thumbnail="true" height="250"]][[image:attach:Finished.PNG]] |
| |
26.1 | 52 | \\ |
| 53 | 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection | ||
| |
24.1 | 54 | |
| |
26.1 | 55 | = {{id name="Windows-–-Requires-Administrator-Privileges"/}}Windows – Requires Administrator Privileges = |
| |
24.1 | 56 | |
| |
18.1 | 57 | 1. Download: [[attach:REMC1CertSFX.exe]] |
| |
26.1 | 58 | 1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate |
| |
18.1 | 59 | 1. Run: [[attach:REMC1CertSFX.exe]] |
| |
26.1 | 60 | 1. When asked to extract, pick a place on your hard disk |
| |
21.1 | 61 | [[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]] |
| |
18.1 | 62 | 1. Navigate to that location and run "InstallREMC1CertVersion6.exe" |
| |
21.1 | 63 | [[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]] |
| |
26.1 | 64 | \\ |
| |
18.1 | 65 | 1. When finished press enter: |
| |
21.1 | 66 | [[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]] |
| |
26.1 | 67 | \\ |
| 68 | 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection | ||
| |
1.1 | 69 | |
| |
11.1 | 70 | = {{id name="Mac-OSX"/}}Mac OSX = |
| |
1.1 | 71 | |
| |
19.1 | 72 | 1. Download [[attach:REMC1.cer]] |
| |
26.1 | 73 | 1. Run the downloaded file |
| 74 | 1. In the window that pops up, change "Keychain" to "System" | ||
| 75 | 1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)\\ | ||
| 76 | 1. OSX may ask for a password before it will install | ||
| 77 | 1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]] | ||
| 78 | 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection | ||
| |
1.1 | 79 | |
| |
27.1 | 80 | = {{id name="Google-Chrome-Console"/}}Google Chrome Console = |
| 81 | |||
| 82 | * [[https:~~/~~/support.google.com/chrome/a/answer/6342302?hl=en>>url:https://support.google.com/chrome/a/answer/6342302?hl=en||shape="rect"]] | ||
| 83 | |||
| |
23.1 | 84 | = {{id name="Windows-AD-Server/Group-policy/Linux/Other"/}}Windows AD Server/Group policy/Linux/Other = |
| |
9.1 | 85 | |
| |
23.1 | 86 | * Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc.. |
| |
13.1 | 87 | ** [[attach:REMC1.crt]] |
| 88 | ** [[attach:REMC1.cer]] | ||
| |
14.1 | 89 | ** [[attach:remc-cert-authority-cert.pem]] |
| |
9.1 | 90 | |
| |
22.1 | 91 | \\ |
| |
1.1 | 92 | |
| |
9.1 | 93 | ---- |
| |
1.1 | 94 | |
| |
22.1 | 95 | \\ |
| |
1.1 | 96 | |
| |
22.1 | 97 | \\ |