mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-03-26 10:21:53 +00:00
ddebb08873
* update initial setup images and some copy * rename backups * cleanup and fix build errors * reconfigure for 035 deployment * Alignment * Initial Root CA trust * Wording touchups and Pro>Pure * Remove extraneous message * Simplify anchor text * restructure backups * update setup wizard screenshots * Update firmware link and filename * update branches list * copy updates * update copy to make anchor tags cleaner * Remove FAQ, link to website FAQ * add missing troubleshooting links --------- Co-authored-by: gStart9 <george@start9labs.com> Co-authored-by: Matt Hill <mattnine@protonmail.com> Co-authored-by: agent <kn0wmad@protonmail.com>
85 lines
3.5 KiB
ReStructuredText
85 lines
3.5 KiB
ReStructuredText
.. _ca-windows:
|
|
|
|
=========================================
|
|
Trusting Your Server's Root CA on Windows
|
|
=========================================
|
|
Complete this guide to trust your server's Root Certificate Authority (Root CA) on Windows.
|
|
|
|
#. Ensure you have already `downloaded your server's Root CA </getting-started/trust-ca/#download-root-ca>`_
|
|
|
|
#. Ensure you have already `installed bonjour </getting-started/connecting-lan/#windows-only>`_
|
|
|
|
#. Click the “Start” menu, type “mmc”, and select "Run as administrator" to access the Windows Management Console.
|
|
|
|
.. figure:: /_static/images/ssl/windows/0_windows_mmc.png
|
|
:width: 50%
|
|
:alt: Windows MMC
|
|
|
|
When prompted with the “User Account Control” window, select “Yes” to allow this program to run.
|
|
|
|
#. When the Management Console opens, navigate to *File > Add/Remove Snap-in*.
|
|
|
|
.. figure:: /_static/images/ssl/windows/1_windows_console_root.png
|
|
:width: 50%
|
|
:alt: Windows Console Root
|
|
|
|
#. Select “Certificates” in the left side menu, then “Add”. This will open another window.
|
|
|
|
.. figure:: /_static/images/ssl/windows/2_windows_add_certificates.png
|
|
:width: 50%
|
|
:alt: Add Certificates
|
|
|
|
#. Select “Computer account” and click “Next". Leave defaulted options on the next screen and click “Finish”.
|
|
|
|
.. figure:: /_static/images/ssl/windows/3_snap_in_wizard.png
|
|
:width: 50%
|
|
:alt: Add Snap-in
|
|
|
|
#. When you return to the “Add or Remove Snap-ins” page, ensure “Certificates (Local Computer)” exists under “Console Root” in the “Selected snap-ins” section, then click “OK”.
|
|
|
|
.. figure:: /_static/images/ssl/windows/4_windows_selected_snapin.png
|
|
:width: 50%
|
|
:alt: Snap-in Selected
|
|
|
|
#. In the left hand menu of the Management Console, navigate to Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates.
|
|
|
|
.. figure:: /_static/images/ssl/windows/5_windows_trusted_certificate_menu.png
|
|
:width: 50%
|
|
:alt: Certificates in Management Console
|
|
|
|
#. Right click on the “Certificates” directory, then navigate to *All Tasks > Import*.
|
|
|
|
.. figure:: /_static/images/ssl/windows/6_windows_import_cert.png
|
|
:width: 50%
|
|
:alt: Import certificate
|
|
|
|
#. Click “Next” on the first page of the Certificate Import Wizard, then browse to the location where you saved the downloaded certificate and open it. Then click "Next".
|
|
|
|
.. figure:: /_static/images/ssl/windows/7_windows_import_cert_wizard.png
|
|
:width: 50%
|
|
:alt: Import cert wizard
|
|
|
|
#. On the “Certificate Store” window, ensure that it says “Trusted Root Certificate Authorities” and click “Next”. Then click "Finish" on the final screen.
|
|
|
|
.. figure:: /_static/images/ssl/windows/8_windows_import_cert_wizard.png
|
|
:width: 50%
|
|
:alt: Import cert wizard
|
|
|
|
#. Select “OK” when the import is successful.
|
|
|
|
.. figure:: /_static/images/ssl/windows/9_success.png
|
|
:width: 20%
|
|
:alt: Import success!
|
|
|
|
#. Verify your server's unique `<adjective-noun> Local Root CA` certificate is in the “Certificates” folder:
|
|
|
|
.. figure:: /_static/images/ssl/windows/10_successful_cert_install.png
|
|
:width: 50%
|
|
:alt: Successful cert install
|
|
|
|
#. You can save the console settings (where we added a snap-in), if desired. The CA certificate will remain imported to the CA certificate store either way, and you will likely use this guide if you need to import a new certificate.
|
|
|
|
.. figure:: /_static/images/ssl/windows/11_console_settings.png
|
|
:width: 20%
|
|
:alt: Console settings
|