Importing the Unified Assurance Global CA Certificate

This guide will show you how to import the Unified Assurance Global CA certificate into the browser store, which is needed for UIs to load faster and improve overall performance.

Note:

After Unified Assurance generated certificates are rotated, the Unified Assurance Global CA certificate may change. If your browser no longer trusts the Unified Assurance UI after certificate rotation, connect to a Unified Assurance instance, navigate to $A1BASEDIR/etc/ssl/, then download and import the new Unified Assurance Global CA certificate. After that, follow the steps given in Import the Certificate into the Store.

Download the Certificate

  1. In the browser, go to the login screen of a Unified Assurance installation.

  2. A notification bar will be shown with a link to download the CA Certificate. Click on the link to download the file, then proceed with the Import the Certificate into the Store steps below.

    Note:

    If the notification bar is not displayed, there are a few possible reasons for that:

    1. If the notification bar was previously manually closed, it will not be displayed again. A workaround for this is to clear any cookies for the installation, then refreshing the login page, or go to the login screen using a private/incognito browser window.

    2. The notification bar may have been disabled by a local administrator. While this is usually done when using a externally signed certificate, it could have been done by mistake as well. Please contact a local administrator for additional assistance.

Import the Certificate into the Store

Windows

Chrome and Edge

  1. Press the Windows button + R to bring up the Run window.

  2. Enter mmc and press enter to launch the Microsoft Management Console.

  3. Click on the File drop-down, then click Add/Remove Snap-in.

  4. In the Available snap-ins list, select Certificates and then click Add.

  5. In the pop-up, select Computer account and click Next.

  6. Leave Local computer... selected and click Finish.

  7. Click OK.

  8. Expand the following path: Certificates (Local Computer) -> Trusted Root Certification Authorities -> Certificates.

  9. In the right panel, click More Actions, then All Tasks, then Import.

  10. In the Certificate Import Wizard, click Next.

  11. Use the Browse button to select the certificate file that was saved in the previous section, then click Next.

  12. Leave the Place all certificates... option selected, then click Next.

  13. Click Finish.

  14. Click OK on the successful import message.

  15. Restart the browser.

  16. Go to a Unified Assurance installation. The browser should now report the site is secure.

Firefox

  1. Follow the steps in the Windows -> Chrome and Edge section to import the certificate into the local store.

  2. Open Firefox, and in a new tab, enter the following in the address bar:

about:config

  1. Click I accept the risk!.

  2. In the Search bar, enter the following:

security.enterprise_roots.enabled

  1. The default value of the option is false. Do one of the following to change it to true:

  2. Double-click on the "security.enterprise..." line.

  3. Right-click on the line and select Toggle from the drop-down.

  4. Close the tab.

  5. Restart Firefox.

  6. Go to a Unified Assurance installation. The browser should now report the site is secure.

Mac

Chrome and Safari

  1. Launch Finder, then select Applications, open the Utilities folder, and start the Keychain Access application.

  2. On the left side of the window, Keychains should be set to System and Category should be set to Certificates.

  3. Drag-and-drop the certificate that was exported earlier from the desktop into the list of certificates.

  4. Double-click the recently added Unified Assurance Global CA certificate to show additional options.

  5. Expand the Trust section.

  6. Set the When using this certificate field to Always Trust.

  7. Close the Unified Assurance Global CA window.

  8. Close the Keychain Access window.

  9. Restart the browser.

  10. Go to a Unified Assurance installation. The browser should now report the site is secure.

Firefox

  1. Follow the steps in the Mac -> Chrome and Safari section to import the certificate into the local store.

  2. Open Firefox, and in a new tab, enter the following in the address bar:

about:config

  1. Click I accept the risk!.

  2. In the Search bar, enter the following:

security.enterprise_roots.enabled

  1. The default value of the option is false. Do one of the following to change it to true:

  2. Double-click on the "security.enterprise..." line.

  3. Right-click on the line and select Toggle from the drop-down.

  4. Close the tab.

  5. Restart Firefox.

  6. Go to a Unified Assurance installation. The browser should now report the site is secure.