How to distribute root certificates to clients using Group Policy

Products

• ProxySG Software - SGOS

Issue/Introduction

How to distribute the ProxySG root CA certificate to desktop certificate stores using Active Directory Group policies.

Resolution

To distribute the ProxySG CA certificate to Internet Explorer using Active Directory Group Policies, you must complete the following steps:

1. Obtain the ProxySG signing certificate:

Go to https://<Proxy-ip>:8082/ssl/download_CA.
Click on the certificate that is used for ssl interception and save it to your desktop.

2. Distribute the certificate as described, using group policies:

Windows 2003: http://technet.microsoft.com/en-us/library/cc782744(v=ws.10).aspx

Windows 2008: http://technet.microsoft.com/en-us/library/cc770315(v=ws.10).aspx

Windows Server 2012: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/distribute-certificates-to-client-computers-by-using-group-policy