mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-03-30 20:14:50 +00:00
78 lines
2.7 KiB
ReStructuredText
78 lines
2.7 KiB
ReStructuredText
.. _lan-ios:
|
|
|
|
===
|
|
iOS
|
|
===
|
|
|
|
.. note:: For security, this will need to be done using a Tor connection. Please use Onion Browser or Consulate to access your Embassy and complete the following steps.
|
|
|
|
#. You will first need to get your :ref:`LAN Certificate<lan-cert>`, which can be found either:
|
|
|
|
#. When completing your Embassy :ref:`Initial Setup<initial-setup>`, it is provided on the final screen
|
|
|
|
or:
|
|
|
|
#. In the ``Embassy`` tab in your Embassy, under ``Settings`` -> ``LAN``
|
|
|
|
.. figure:: /_static/images/embassy_lan_setup.svg
|
|
:width: 60%
|
|
:alt: LAN setup menu item
|
|
|
|
#. Select ``Download Root CA``. Clicking this will prompt you to “Save to device”.
|
|
|
|
.. figure:: /_static/images/embassy_lan_setup0.svg
|
|
:width: 60%
|
|
:alt: LAN setup page
|
|
|
|
#. You will be directed to a page in your default browser indicating next steps and that the profile has been successfully downloaded. Be sure to complete all steps in this process! These steps are also outlined below.
|
|
|
|
.. note::
|
|
If you have changed the default browser from Safari to Brave, the following auto save certificate to device flow will *not* work. Safari, Firefox, and Chrome work as expected. We recommend you temporarily use one of these browsers to complete this action.
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_certificate_install_page.svg
|
|
:width: 40%
|
|
:alt: Certificate install page
|
|
|
|
Select "Allow" on the certificate install page
|
|
|
|
#. Go to Settings on your iOS device.
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_general_settings.svg
|
|
:width: 40%
|
|
:alt: General settings
|
|
|
|
#. Navigate to *General > Profile(s) > Downloaded Profile > Install*.
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_profiles.svg
|
|
:width: 40%
|
|
:alt: Profiles
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_install_profile.svg
|
|
:width: 40%
|
|
:alt: Install profile
|
|
|
|
Select "Install" for Embassy Local Root CA
|
|
|
|
#. Select “Yes” to any warning prompts.
|
|
|
|
#. Next, navigate to *General > About > Certificate Trust Settings*.
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_cert_trust_settings.svg
|
|
:width: 40%
|
|
:alt: Certificate trust settings
|
|
|
|
Select Certificate Trust Settings (scroll all the way down)
|
|
|
|
#. Enable full trust for root certificates.
|
|
|
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_cert_trust.svg
|
|
:width: 40%
|
|
:alt: Enable full trust
|
|
|
|
Toggle to enable full trust for root certificates. "Continue" when warning prompts.
|
|
|
|
#. Test that this process worked successfully by navigating to the LAN address provided from one of the locations listed under Step 1 at the top of this page. You should not see warnings about the security of this site in your browser (if you do, setup was not successful).
|
|
|
|
|
|
|