1 Reply Latest reply on Dec 14, 2012 10:39 PM by btlyric

    SSL scanning and Cert

      If I understand what I have been reading I need to install a MWG issued Cert to every client machine.  In initial thoughs I have not been able to find:

      If MWG will push thei ssert to all clients that connect?  If not, where the Cert needs to be installed on the end user, so that I can roll out with GPO.

      Where in MWG do you create the cert?

      Can anyone provied a step by step to make SSL scanning happen?

       

       

       

      Thanks in advance.

        • 1. Re: SSL scanning and Cert
          btlyric

          Two ways to do this:

           

          Use local Certificate Authority (CA) in your environment which is acting as a Root CA:

           

          You can use that Root CA to create a subordinate CA certificate. In this case, you would need to push the Root CA certificate to your clients. For Windows systems, you could push via GPO to the Windows certificate store and that will handle Internet Explorer, Chrome, and Opera. For Firefox, the certificate will need to be imported to the browser.

           

          Use self-signed certificate generated on MWG:

           

          Then distribute that cert to client machines and install it in the Trusted Root Certificate store (or for Firefox, in Certificate Manager, Authorities).