Cipafilter Support:
309 517 2022 option 2
Mon - Fri 7 AM - 6 PM CT
Group Policy Object (GPO) - SSL Certificate Installation
Posted by , Last modified by Jim Giseburt on 12 April 2017 09:50 AM

This network employs a technology called SSL filtering which allows your network's administrators to filter out harmful or inappropriate Web content such as viruses and pornography. In order for this technology to work effectively, the network's filtering unit must issue to your computer or mobile device a file called an SSL certificate.

This guide will help you install the SSL filtering certificate as a trusted root CA on a Windows / Active Directory Group Policy Object (GPO). Certificates installed via Group Policy will be respected by all browsers which use the operating system's built-in certificate store — this includes Internet Explorer, Chrome, and Safari.

Step 1

First, click the Download Certificate button; this will begin a download of the file to your computer. Visit your domain's portal page to download a certificate. By default, this is


Step 2

Windows save prompt


Depending on your browser and configuration, you will probably be asked whether you would like to open the file or save it; choose Save, and, if prompted, save the file to an easily accessible location (such as the Desktop).

(Note: These image show Internet Explorer 8 and Windows Server 2003; you may not see exactly the same thing if you are using another browser or a different version of Windows; however, the general process and wording should be the same.)


Step 3

Windows Administrative Tools


Using an account with sufficient administrative permissions, launch the Group Policy Management utility. This can usually be found under Administrative Tools in either the Start menu or the Control Panel.


Step 4

Windows Group Policy Management


Highlight the Group Policy Object you'd like to modify — if you aren't sure which one it is, please contact your network administrator or directory vendor — and right-click it. Then, select Edit.


Step 5

Windows Group Policy Object Editor


The Group Policy Object Editor will open next. In the left-hand column, expand (double-click) the list items as follows: Computer Configuration > Windows Settings > Security Settings > Public Key Policies > Trusted Root Certification Authorities.

Right-click on Trusted Root Certification Authorities and select Import.


Step 6

Windows Certificate Import Wizard


The Certificate Import Wizard will open; click Next.


Step 7

Windows Certificate Import Wizard


You will be asked to specify the certificate file to import; click the Browse button to the right.


Step 8

Windows Open dialogue


An Open dialogue will appear, allowing you to select a file. Locate the certificate file you saved earlier, highlight it, and click Open.


Step 9

Windows Certificate Import Wizard


The File to Import screen should now show the certificate file name; click Next.


Step 10

Windows Certificate Import Wizard


You will be prompted for a certificate store. The correct option — to place the certificate in the Trusted Root Certification Authorities store — should already be selected; click Next.


Step 11

Windows Certificate Import Wizard


At the Completing the Certificate Import Wizard screen, press the Finish button.


Step 12

Windows Certificate Import Wizard


A confirmation will appear, indicating that the certificate import was successful. Press OK.


Step 13

You're done! You may close any remaining certificate windows and continue working as usual; the certificates will be installed to each applicable work station upon their next log-in. In most cases, you (and your users) will not notice anything different after the certificate is installed.

 windows-gpo-01-save-file.png (5.42 KB)
 windows-gpo-02-administrative-tools.png (19.67 KB)
 windows-gpo-03-edit-gpo.png (10.18 KB)
 windows-gpo-04-trusted-root-ca-import.png (8.44 KB)
 windows-gpo-05-certificate-import-wizard.png (3.90 KB)
 windows-gpo-06-file-name.png (2.50 KB)
 windows-gpo-07-open-dialogue.png (13.65 KB)
 windows-gpo-08-file-name-entered.png (2.85 KB)
 windows-gpo-09-place-all-certificates.png (2.89 KB)
 windows-gpo-10-finish.png (3.53 KB)
 windows-gpo-11-successful.png (1.78 KB)
(2 vote(s))
Not helpful

Comments (0)
©Cipafilter 2017. All Rights Reserved.