Skip to Content
Version 30.1 by Eric Kemppainen on 2021/12/23 05:24
Show last authors
1 {{toc/}}
2
3 = {{id name="General-Info"/}}General Info =
4
5 * In order for the Fortigate generated Deep Scanning certs to not generate an SSL warning you must import and Trust the REMC1 certificate authority cert.(% class="anchor" %)
6 * All Fortigate SSL certificates are dynamically generated from this certificate for Deep Scanning web filter/firewall profiles(% class="anchor" %)
7 * To quickly deploy the certificate push it out in the Machine section of Active Directory Group Policy under the Trusted CA authorities section.(% class="anchor" %)
8 * Firefox needs to have the certificate individually imported for each user. Firefox is not going to be feasible for deep scanning firewalls (all of them not just Fortigate). **Uninstall firefox.**(% class="anchor" %)
9 * Chrome, IE, Safari are feasible options.(% class="anchor" %)
10 * (% class="anchor" %)If you are REMC1 staff and are looking for methods to deploy the certificate please read this page: [[doc:NET.Methods to Deploy REMC1 Certificate Authority.WebHome]]
11
12 = {{id name="iOS-(iPad,-iPod,-iPhone)"/}}iOS(% style="color: rgb(0,0,0);" %) (iPad, iPod, iPhone)(%%) =
13
14 1. Visit this website with the IOS device on Guest Wireless (or from home etc).(% class="anchor" %)
15 1. Or email the certificate to the IOS device.(% class="anchor" %)
16 1. Download the [[REMC1 .crt >>attach:REMC1.crt]]certificate file with the IOS device: [[(% class="anchor" %) >>url:https://wiki.remc1.net/DeployREMC1CertificateAuthority?action=AttachFile&do=view&target=REMC1.crt||title="" shape="rect" class="attachment"]]
17 1. On the IOS device tap "Install"
18 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
19
20 = {{id name="Android"/}}Android(% style="color: rgb(0,0,0);" %) (%%) =
21
22 * Connect to LTE internet if possible, alternatively download the certificate onto a laptop and connect the phone with a USB cable.
23 * Download [[attach:REMC1.cer]] and copy it to a secure location
24 (% style="text-align: left;" %)
25 ** (% style="color: rgb(255,0,0);" %)**IMPORTANT: **(% style="color: rgb(255, 0, 0); color: rgb(0, 0, 0)" %)We recommend(%%) moving this to a folder other than downloads. If you delete the above file, you will lose your connection to the wifi and have to do this process again.
26 * Follow the directions on [[Connect Device to Wireless>>url:https://confluence.remc1.net/display/PS/Connect+Device+to+Wireless||shape="rect"]] to complete the connection
27
28 (% class="line874" %)
29 NOTE: You may need to turn wifi off and back on for the settings to take effect.
30
31 = {{id name="Windows---Without-Administrator"/}}Windows - Without Administrator =
32
33 1. Download: [[attach:REMC1.cer]]
34 1. Open up the certificate by double clicking on the downloaded file and choosing **Open**
35 \\ [[image:attach:Downloads.PNG||height="250"]][[image:attach:Open.PNG||height="250"]]
36 \\
37 1. On the Certificate information window that opens up choose **Install Certificate...** at the bottom of the window
38 \\[[image:attach:Install.PNG||height="400"]]
39 \\
40 1. Go through the wizard, accepting the default options
41 \\[[image:attach:Install2.PNG||thumbnail="true" height="250"]][[image:attach:Install3.PNG||thumbnail="true" height="250"]][[image:attach:Install4.PNG||thumbnail="true" height="250"]][[image:attach:Finished.PNG]]
42 \\
43 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
44
45 = {{id name="Windows-–-Requires-Administrator-Privileges"/}}Windows – Requires Administrator Privileges =
46
47 1. Download: [[attach:REMC1CertSFX.exe]]
48 1. Copy [[attach:REMC1CertSFX.exe]] onto the computer missing the certificate
49 1. Run: [[attach:REMC1CertSFX.exe]]
50 1. When asked to extract, pick a place on your hard disk
51 [[image:attach:extract.PNG||alt="Windows 7-zip self-extracting archive display" title="Windows 7-zip self-extracting archive display"]]
52 1. Navigate to that location and run "InstallREMC1CertVersion6.exe"
53 [[image:attach:run.PNG||alt="Windows cert folder display" title="Windows cert folder display" height="250"]]
54 \\
55 1. When finished press enter:
56 [[image:attach:enter.PNG||alt="Windows cert authority program display" title="Windows cert authority program display" height="250"]]
57 \\
58 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
59
60 = {{id name="Mac-OSX"/}}Mac OSX =
61
62 1. Download [[attach:REMC1.cer]]
63 1. Run the downloaded file
64 1. In the window that pops up, change "Keychain" to "System"
65 1*. [[image:attach:installMac.png||alt="Mac add certificate page display" title="Mac add certificate page display"]](% class="anchor" %)\\
66 1. OSX may ask for a password before it will install
67 1*. [[image:attach:password.png||alt="Mac keychain access username and password page display" title="Mac keychain access username and password page display"]]
68 1. Follow the directions on [[Connect Personal Machine to Wireless>>url:https://confluence.remc1.net/x/ZYkh||shape="rect"]] to complete the connection
69
70 = {{id name="Google-Chrome-Console"/}}Google Chrome Console =
71
72 * [[https:~~/~~/support.google.com/chrome/a/answer/6342302?hl=en>>url:https://support.google.com/chrome/a/answer/6342302?hl=en||shape="rect"]]
73
74 = {{id name="Certificate-Download---Windows-AD-Server/Group-policy/Linux/Other"/}}Certificate Download - Windows AD Server/Group policy/Linux/Other =
75
76 * Import the pem or cer file into your group policy to push out to windows clients. You can use the crt or pem on linux as well etc..
77 ** [[attach:REMC1.crt]]
78 ** [[attach:REMC1.cer]]
79 ** [[attach:remc-cert-authority-cert.pem]]
80
81 \\
82
83 ----
84
85 \\
86
87 \\