Regardless of which deployment method you choose, all browsers must have the certificate installed for SSL inspection to work properly. It is important to know that filtering will still occur even without the certificate deployed, but users will receive certificate warnings in their browser for HTTPS sites for which the Cipafilter provides SSL inspection (google.com, for example).
To get the SSL certificate from the Cipafilter uploaded to the Google Admin Console, it will first need to be downloaded. This can be done by opening a web browser and navigating to portal.cipafilter.com/ssl. Here you will see the blue Download Certificate button. You will want to click this button and save the certificate somewhere you will be able to easily find it. There is no need to worry about what walkthrough the site may direct you to, as every walkthrough has the exact same certificate to download. Once you have done this, just follow the steps below to get the certificate uploaded to the Google Admin Console!
- Using an account with sufficient administrative permissions, log in to the Google Admin console for your G Suite domain. The Admin console can normally be found at admin.google.com, or you can use the Admin console or Manage this domain link on some Google sites.
- On the Admin-console home page, expand Devices and click Networks. On the Networks page, make sure the organizational unit you wish to add the certificate to, and click Certificates.
These images show Chrome running on macOS; you may not see exactly the same thing if you are using another browser or operating system; however, the general process and wording should be the same.)
- On the Add certificate page, click Upload. This will open a dialog allowing you to select the SSL certificate you would like to distribute.
- Once you've selected your SSL certificate, select the checkboxes for devices (such as Chromebook) you would like to deploy the certificate to. Then, click Add. The certificate has now been added to your domain and will be distributed to devices when they log on to the domain.
The SSL certificate can take up to a full 24 hours before being available to Chromebooks and will only be installed to the local users profiles as they access the Chromebook.
- Mac OS X
- Google Admin Console