Cipafilter Support:
Support@Cipafilter.com
800.243.3729 ext 300
Mon - Fri 7 AM - 6 PM CT
Knowledgebase:
Group Policy Object (GPO) - SSL Certificate Installation
Posted by , Last modified by Jim Giseburt on 12 April 2017 09:50 AM

This network employs a technology called SSL filtering which allows your network's administrators to filter out harmful or inappropriate Web content such as viruses and pornography. In order for this technology to work effectively, the network's filtering unit must issue to your computer or mobile device a file called an SSL certificate.

This guide will help you install the SSL filtering certificate as a trusted root CA on a Windows / Active Directory Group Policy Object (GPO). Certificates installed via Group Policy will be respected by all browsers which use the operating system's built-in certificate store — this includes Internet Explorer, Chrome, and Safari.


Step 1

First, click the Download Certificate button; this will begin a download of the file to your computer. Visit your domain's portal page to download a certificate. By default, this is https://portal.cipafilter.com.

 

Step 2

Windows save prompt

 

Depending on your browser and configuration, you will probably be asked whether you would like to open the file or save it; choose Save, and, if prompted, save the file to an easily accessible location (such as the Desktop).

(Note: These image show Internet Explorer 8 and Windows Server 2003; you may not see exactly the same thing if you are using another browser or a different version of Windows; however, the general process and wording should be the same.)

 

Step 3

Windows Administrative Tools

 

Using an account with sufficient administrative permissions, launch the Group Policy Management utility. This can usually be found under Administrative Tools in either the Start menu or the Control Panel.

 

Step 4

Windows Group Policy Management

 

Highlight the Group Policy Object you'd like to modify — if you aren't sure which one it is, please contact your network administrator or directory vendor — and right-click it. Then, select Edit.

 

Step 5

Windows Group Policy Object Editor

 

The Group Policy Object Editor will open next. In the left-hand column, expand (double-click) the list items as follows: Computer Configuration > Windows Settings > Security Settings > Public Key Policies > Trusted Root Certification Authorities.

Right-click on Trusted Root Certification Authorities and select Import.

 

Step 6

Windows Certificate Import Wizard

 

The Certificate Import Wizard will open; click Next.

 

Step 7

Windows Certificate Import Wizard

 

You will be asked to specify the certificate file to import; click the Browse button to the right.

 

Step 8

Windows Open dialogue

 

An Open dialogue will appear, allowing you to select a file. Locate the certificate file you saved earlier, highlight it, and click Open.

 

Step 9

Windows Certificate Import Wizard

 

The File to Import screen should now show the certificate file name; click Next.

 

Step 10

Windows Certificate Import Wizard

 

You will be prompted for a certificate store. The correct option — to place the certificate in the Trusted Root Certification Authorities store — should already be selected; click Next.

 

Step 11

Windows Certificate Import Wizard

 

At the Completing the Certificate Import Wizard screen, press the Finish button.

 

Step 12

Windows Certificate Import Wizard

 

A confirmation will appear, indicating that the certificate import was successful. Press OK.

 

Step 13

You're done! You may close any remaining certificate windows and continue working as usual; the certificates will be installed to each applicable work station upon their next log-in. In most cases, you (and your users) will not notice anything different after the certificate is installed.



Attachments 
 
 windows-gpo-01-save-file.png (5.42 KB)
 windows-gpo-02-administrative-tools.png (19.67 KB)
 windows-gpo-03-edit-gpo.png (10.18 KB)
 windows-gpo-04-trusted-root-ca-import.png (8.44 KB)
 windows-gpo-05-certificate-import-wizard.png (3.90 KB)
 windows-gpo-06-file-name.png (2.50 KB)
 windows-gpo-07-open-dialogue.png (13.65 KB)
 windows-gpo-08-file-name-entered.png (2.85 KB)
 windows-gpo-09-place-all-certificates.png (2.89 KB)
 windows-gpo-10-finish.png (3.53 KB)
 windows-gpo-11-successful.png (1.78 KB)
(2 vote(s))
Helpful
Not helpful

Comments (0)
©Cipafilter 2017. All Rights Reserved.