How do I deploy a Self-Signed Root Certificate with a Group Policy using ProxySG

Products

• ProxySG Software - SGOS

Issue/Introduction

Deploying a Self-Signed Root Certificate with Group Policy

1.  To get a copy of the certificate into a file so that it can be imported into a Group Policy, click View Certificate. The certificate is displayed.

 

2.   Select the Details tab and then click Copy to File. 

3. Select Cryptographic Message Syntax Standards (PKCS #7) as the file format and then click Next.

 

4.  When prompted for a filename, enter a name with the .p7b extension.
    
5. Copy the file to the Windows Server with the Group Policy Management.

 
Deploying the Certificate with Group Policy

1. Launch the Group Policy Manager and navigate to the object that corresponds too the policy on which the certificate will be used. I prefer the Default Domain Policy because there is no need to deploy this certificate through the entire enterprise. Right click on the selected object and select Edit.

 

2. Select Computer Configuration > Windows Settings > Security Settings > Public Key Policies.
    
3. Right-click the Trusted Root Certification Authorities folder and then select Import.

4.  In the Certificate Import Wizard, browse to the location of the certificate file you saved to this server and then click Next. The Certificate Store screen displays.

5. Click Next and then click Finish to import the certificate. It now appears in the Group Policy object. The next time a user logs in, these settings will be applied and the certificate will be trusted by Internet Explorer.