Zertifikate<\/code> > Zertifizierungsstelle (CA)<\/code> from the menu. Then click on the download icon next to SecurityAppliance_SSL_CA<\/code>.<\/p>\n\n\n![\"Download](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-download-1024x658.jpg\")
<\/a><\/figure>\n<\/figure>\n\nYou will find the certificate under the name SecurityAppliance_SSL_CA.pem<\/code> on your hard disk.<\/p>\n\nDistribute certificate via GPO (IE, Edge, Chrome)<\/h2>\n\n
The easiest way to distribute the certificate to all computers on the network is via a group policy in a domain. If you don’t have a domain, you can see the instructions for local installation for Windows and macOS below. For now, we will explain how the distribution of the certificate for the Internet Explorer<\/code>, Edge<\/code> and Google Chrome<\/code> browser works. Since Firefox has its own certificate management, the procedure there is somewhat different. We describe this later in this article.<\/p>\n\n- First, log in to your Active Directory server.<\/li>
- Open the
Gruppenrichtlinienverwaltung<\/code>, select a policy and change to the directory Vertrauensw\u00fcrdige Stammzertifizierungsstellen<\/code> > Zertifikate<\/code> .<\/li>- Then right-click in an empty area in the right column to open the context menu. Then select
Alle Aufgaben<\/code> > Importieren...<\/code> .<\/li>- Follow the short import wizard and select the
SecurityAppliance_SSL_CA.pem<\/code> certificate.<\/li><\/ol>\n\n\n![\"Trusted](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-gpo-vertrauenswuerdige-stammzertifizierungsstellen-1024x855.jpg\")
<\/a><\/figure>\n<\/figure>\n\nInstalling a certificate on a local Windows computer<\/strong> <\/h2>\n\nIf you want to import the certificate on a single Windows computer, the procedure is practically the same as if you were importing the certificate on the Active Directory server.<\/p>\n\n
- Log in to your local Windows computer.<\/li>
- Open the program
certmgr.msc<\/code> from the start menu and change to the directory Vertrauensw\u00fcrdige Stammzertifizierungsstellen<\/code> > Zertifikate<\/code> .<\/li>- Then right-click in an empty area in the right column to open the context menu. Then select
Alle Aufgaben<\/code> > Importieren...<\/code> .<\/li>- Follow the short import wizard and select the
SecurityAppliance_SSL_CA.pem<\/code> certificate.<\/li><\/ol>\n\n\n![\"Trusted](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-crtmgr-vertrauenswuerdige-stammzertifizierungsstellen-1024x561.jpg\")
<\/a><\/figure>\n<\/figure>\n\nInstalling a certificate on a local Mac computer<\/strong> <\/h2>\n\nOn a Mac, the installation is also very simple. As is well known, certificates are managed there in the key ring.<\/p>\n\n
- Open the certificate
SecurityAppliance_SSL_CA.pem<\/code> with a double click. After that, the keychain will be opened automatically.<\/li>- Set the status for this certificate to
Immer vertrauen<\/code>.<\/li>- After that you can close the window and have to enter your admin password as confirmation.<\/li><\/ol>\n\n
\n![\"macOS](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-macos-schlusselbund-1024x682.jpg\")
<\/a><\/figure>\n<\/figure>\n\nInstall certificate via GPO for Mozilla Firefox (Windows)<\/h2>\n\n
Mozilla’s Firefox browser has its own certificate management and therefore the methods described above unfortunately do not work. So if you surf the Internet with Firefox, you will have to put up with a somewhat more cumbersome installation of the certificate here.<\/p>\n\n
1. download Firefox GPO template<\/h3>\n\n
Mozilla provides the GPO templates for Firefox on GitHub. You need the following files:<\/p>\n\n
- firefox.admx<\/li>
- mozilla.admx<\/li>
- firefox.adml<\/li>
- mozilla.adml<\/li><\/ul>\n\n
You can download these files individually from the Github Mozilla repository<\/a>. Or you can download the complete policy_templates.zip<\/a>, which contains all files for Windows and macOS in different languages.<\/p>\n\n\n![\"Firefox](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-windows-firefox-gpo-policy-template-dateien-1024x713.jpg\")
<\/a><\/figure>\n<\/figure>\n\n2. import templates on Windows<\/h3>\n\n
Next, these .admx<\/code> and .adml<\/code> files still need to be copied to the correct folder on the Active Directory server so that they are later visible as a template in the Group Policy Management Editor. Make sure that you log in with a user who has sufficient permissions.<\/p>\n\n- Open Windows Explorer and go to the path
C:\\Windows\\PolicyDefinitions<\/code>. If your root partition does not have the drive letter C:, you can also call the path with a variable: %systemroot%\\PolicyDefinitions<\/code>.<\/li>- Copy the two documents
firefox.adml<\/code> and mozilla.adml<\/code> into this folder.<\/li>- The files
firefox.admx<\/code> and mozilla.admx<\/code> are available in different languages and belong in the corresponding subfolder de-DE<\/code> or en-US<\/code>.<\/li><\/ol>\n\n\n![\"Install](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-windows-firefox-gpo-template-policydefinitions-folder-1024x462.jpg\")
<\/a><\/figure>\n<\/figure>\n\n3. create guideline<\/h3>\n\n- Now open in the group policy management editor the
Administrativen Vorlagen<\/code> > Mozilla<\/code> > Firefox<\/code> > Zertifikate<\/code> > Install Certificates<\/code>.<\/li>- Enable the policy and paste the name of the certificate file you downloaded from your firewall earlier. At the time of this writing, the name is
SecurityAppliance_SSL_CA.pem<\/code>.<\/li><\/ol>\n\n\n![\"GPO](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-windows-firefox-gruppenrichtlinien-1024x631.jpg\")
<\/a><\/figure>\n<\/figure>\n\n4. copy certificate to Windows computer<\/h3>\n\n
In order for the certificate to be imported when the browser is started, the .pem<\/code> file must be copied to the user profile. You can also do this via the GPO. The certificate SecurityAppliance_SSL_CA.pem<\/code> must be copied to the following two directories:<\/p>\n\n- %USERPROFILE%<\/li>
- %USERPROFILE%<\/li><\/ul>\n\n
5. control Firefox certificate management<\/h3>\n\n
To check if everything worked, you can open the certificate management<\/strong> via the settings in Firefox. Under the tab Zertifizierungsstellen<\/code> you should now find the Sophos certificate.<\/p>\n\n\n![\"Firefox](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-windows-firefox-einstellungen-zertifikatsverwaltung-1024x822.jpg\")
<\/a><\/figure>\n<\/figure>\n\nInfo:<\/strong> If you want to import the certificate on a macOS or Linux system, you can find the system paths on the following page: Mozilla Wiki – Add Root Certificate to Firefox<\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"template":"","format":"standard","kb_kategorie":[382],"class_list":["post-22099","kb","type-kb","status-publish","format-standard","hentry","kb_kategorie-sophos-firewall"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb\/22099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb"}],"about":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/types\/kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/users\/5"}],"wp:attachment":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media?parent=22099"}],"wp:term":[{"taxonomy":"kb_kategorie","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb_kategorie?post=22099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"Download](\"https:\/\/www.avanet.com\/assets\/sophos-sfos-ssl-proxy-ca-download.jpg\")
<\/a><\/figure>\n<\/figure>\n\n