Embed Size (px)
Citation preview
UbuntuSSLCertificateInstallationVersion1.2.1
December2016
2
Introduction
ThepurposeofthisdocumentistodescribehowtogettheCatoSSLCertificateanddeployitlocallyonUbuntu.
Overview
InstallingtheCatoNetworksCertificate,andaddingitasatrustedapplication,allowsuserstobenefitfromCatosecurityservicesandreducetheextrasystemnotificationsproducedbythefollowinginstances:
• BlockHTTPStraffic:IfSSLtrafficisbeingblocked(i.e.URLfiltering,InternetFirewallrules),CatoNetworkCertificateallowsaccesstoblockedpages.
• TLSinspectiononclient’straffic:IfTLSisenabled,thewebbrowserpromptsthattheconnectionisnotprivate(asexpectedcertificatewassupposedtobeissuedbythetarget).TheCatoNetworkCertificatebypassesthisnotification.
InstallingonUbuntu
1. OpentherelevantPEMfile2. Thefollowingpopupopens.PressImport
3. Uponsuccessfulinstalltion,pressDone.
InstallingonFireFox
SinceFirefoxdoesnotusetheoperatingsystem’scertificatestorebydefault,pleasefollowthebelowstepsformore
1. AccesstheImportcertificatescreen(underPreferences->Advanced)2. Click“ViewCertificates”3. Click“Import”4. Navigatetowhereyoustoredthecertificateandclick“Open”5. Click“Import”.ThedownloadingCertificatedialogdisplays.
a. Select“TrustthisCAtoidentifywebsites”andclickOK
Additionalresources
IncaseofissuespleasecontactCatoNetwork’[email protected]
