Add Cloud Root CA to Safari for SSL Interception

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Enabling SSL interception on the Cloud SWG requires you to also install an SSL root certificate, downloadable from the service portal, on each employee client browser. If you do not perform this procedure, employees receive certificate error pop-up dialogs for each SSL connection attempt.

Perform the following steps for Apple Safari browsers. The procedures assume that you have downloaded the root certificate from your Cloud SWG portal account to a network location.

Environment

• Safari on Mac and Windows
   

Resolution

Safari on MacOS

Download a text file, which you can edit and post or distribute to employees with existing systems (with possible modifications, such as the network location of the root cert file). Note: To install the certificate, users must have admin privileges on their client systems.

1. From the browser, open the directory in which you downloaded the root cert file.
2. Double-click the certificate.
3. You are prompted to store the certificate in the login keychain or the system keychain. To make the certificate available to all users of this system, select system keychain.
4. In Keychain Access, select the System keychain; then select Cloud Services Root CA certificate.
5. Select File > Get Info and expand the Trust section.
6. Change Secure Sockets Layer (SSL) value to Always Trust.
7. Close the dialogs and enter your password.

Safari on Windows

Download a text file, which you can edit and post or distribute to employees with existing systems (with possible modifications, such as the network location of the root cert file). Note: They must have admin privileges to install the certificate.

1. In the browser:

   1. Navigate to where you downloaded the file.
   2. Right-click the file and select Install Certificate.
   3. You might be prompted for admin credentials and/or a confirmation prompt.
2. On the first wizard screen, click Next.

3. On the Certificate Store screen:

   1. Select the Place all certificates in the following store option.
   2. Click Browse.
   3. Select the Trusted Root Certification Authorities option.
   4. Click OK.
4. Click Next.
5. Click Finish.
6. If another security warning dialog displays, click Yes.