.. _lan-windows:

=======
Windows
=======

Unfortunately, Windows does not have mDNS support built-in, which is necessary in order to visit .local addresses, so we recommend using the Bonjour service.  Check out this :ref:`FAQ answer<why-bonjour>` for details.

#. Install `Bonjour Print Services <https://support.apple.com/kb/DL999>`_ on your Windows machine.

   .. tip::  If you are experiencing issues after installing Bonjour, you might have had a previous or failed install. To fix:

            #. Check out this video: https://www.youtube.com/watch?v=9ECCB3bqNDQ
            #. Uninstall Bonjour completely via ``system settings -> remove programs``
            #. Reinstall Bonjour Printer Driver package (download at https://support.apple.com/kb/DL999?locale=en_US)
            #. Restart Windows
            #. Note: Uninstalling Bonjour via the setup package seems to be not enough to solve the issue. Bonjour must be uninstalled via windows system settings.

#. Visit your Embassy at its Tor Address.

    .. note:: Using this encrypted Tor connection is required for security reasons.

#. Navigate to the :ref:`Embassy tab<embassy-tab>` -> Settings -> LAN

   .. figure:: /_static/images/embassy_lan_setup.svg
    :width: 90%
    :alt: LAN setup menu item

#. Click "Download Root CA". This will prompt a download to save the certificate file to your machine.

   .. figure:: /_static/images/embassy_lan_setup0.svg
    :width: 90%
    :alt: LAN setup page

#. Back in Windows, right-click the “Start” menu and select “Run”.

#. Type in “mmc” and click “OK”. When prompted on the “User Account Control” window, select “Yes” to allow this program to run.

   .. figure:: /_static/images/ssl/windows/1_windows_mmc.svg
    :width: 90%
    :alt: Windows MMC

    Access the Windows Management Console

#. When the Management Console opens, navigate to *File > Add/Remove Snap-in*.

   .. figure:: /_static/images/ssl/windows/2_windows_console_root.svg
    :width: 90%
    :alt: Windows Console Root

    Add Snap-in from Console Root

#. Select “Certificates” in the left side menu, then “Add”. This will open another window.

   .. figure:: /_static/images/ssl/windows/3_windows_add_certificates.svg
    :width: 90%
    :alt: Add Certificates

    Add Certificates to selected snap-ins

#. Select “Computer account” and click “Next. Leave defaulted options on the next screen and click “Finish”.

#. When you return to the “Add or Remove Snap-ins” page, ensure “Certificates (Local Computer)” exists under “Console Root” in the “Selected snap-ins” section, then click “OK”.

   .. figure:: /_static/images/ssl/windows/4_windows_selected_snapin.svg
    :width: 90%
    :alt: Snap-in Selected

    Certificates (Local Computer) is selected as snap-in

#. In the left hand menu of the Management Console, navigate to Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates.

   .. figure:: /_static/images/ssl/windows/5_windows_trusted_certificate_menu.svg
    :width: 90%
    :alt: Certificates in Management Console

    Access Certificates in Management Console

#. Right click on “Certificates”, then navigate to *All Tasks > Import*.

   .. figure:: /_static/images/ssl/windows/6_windows_import_cert.svg
    :width: 90%
    :alt: Import certificate

    Select "Import" from Certificates sub-menu

#. Click “Next” on the first page of the Certificate Import Wizard, then browse to the location where you saved the downloaded certificate and click “Open”.

   .. figure:: /_static/images/ssl/windows/7_windows_import_cert_wizard.svg
    :width: 90%
    :alt: Import cert wizard

    Add downloaded certificate int he Certificate Import Wizard

#. On the “Certificate Store” window, ensure that it says “Trusted Root Certificate Authorities” and click “Next”.

#. Select “OK” when the import is successful.

#. Verify the Embassy Local Root CA certificate is in the “Certificates” folder.

   .. figure:: /_static/images/ssl/windows/8_windows_successful_cert_install.svg
    :width: 90%
    :alt: Successful cert install

    Embassy Local Root CA imported into Certificate folder

#. You can save the settings to the console if desired or cancel.

#. Open your favorite browser to import this certificate and follow the steps for :ref:`browser setup <lan-browser>`.
