.. _lan-brave:

=========================
Trust Embassy CA in Brave
=========================

.. caution:: You will first need to complete :ref:`lan-os` for your device before continuing.

.. tabs::

    .. group-tab:: Linux / macOS

        #. Open a new tab in Brave and open to "Settings" from the top-right hamburger menu.

            .. figure:: /_static/images/ssl/browser/brave_settings.png
              :width: 30%
              :alt: Brave settings page

        #. On the left hand sidebar, select the "Privacy and security" section, then the "Security" menu item.

            .. figure:: /_static/images/ssl/browser/brave_security.png
              :width: 60%
              :alt: Brave Privacy and security settings

        #. At the bottom of the section, select "Manage Certificates".
        
            .. figure:: /_static/images/ssl/browser/brave_security_settings.png
              :width: 60%
              :alt: Brave Security settings page

        #. Click the "Authorities" tab

            .. figure:: /_static/images/ssl/browser/brave-authorities.png
              :width: 60%
              :alt: Certificate Authorities

        #. If you see "org-Start9" with a trusted “Embassy Local Root CA” listed under it, open a new tab to apply the certificate. If this does not work, quit and restart Brave.

        #. If you do not see "org-Start9" in the list, click "Import" and open the downloaded "Embassy Local Root CA.crt" file on your device. Check the box for "Trust this certificate for identifying websites" and click "OK".

            .. figure:: /_static/images/ssl/browser/brave_view_certs.png
              :width: 60%
              :alt: Brave Manage Certificates sub-menu on macOS


    .. group-tab:: Windows

        #. Open a new tab in Brave and open to "Settings" from the top-right hamburger menu.

            .. figure:: /_static/images/ssl/browser/brave_settings.png
              :width: 30%
              :alt: Brave settings page

        #. On the left hand sidebar, select the "Privacy and security" section, then the "Security" menu item.

            .. figure:: /_static/images/ssl/browser/brave_security.png
              :width: 60%
              :alt: Brave Privacy and security settings

        #. At the bottom of the section, select "Manage Certificates".
        
            .. figure:: /_static/images/ssl/browser/brave_security_settings.png
              :width: 60%
              :alt: Brave Security settings page

        #. The Windows Certificates Manager will open.  Click the `Trusted Root Certification Authorities` tab, then `Import...`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step1.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 1

        #. The Windows Certificate Import Wizard will open.  Click `Next`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step2.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 2

        #. Click `Browse...` to select the CA Cert

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step3.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 3

        #. Navigate to the location of and select your previously dowloaded `Embassy Local CA.crt` file, and click `Open`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step4.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 4

        #. The path to the CA certificate will be filled in.  Click `Next`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step5.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 5

        #. Ensure `Place all certificates in the following store` is selected and the Certificate store is set to `Trusted Root Certification Authorities`.  Click `Next`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step6.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 6

        #. Click `Finish`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step7.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 7

        #. Click `Yes` to accept the subsequent Security Warning

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step8.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 8

        #. The Windows Certificates Manager should report that the certificate import was successful.  Click `OK`, then `Close`

            .. figure:: /_static/images/ssl/windows/windows_certificates_caimport_step9.jpg
              :width: 40%
              :alt: Windows Certificates CA Cert Import Step 9