How to download and install the Bloxx Security Certificate

Transcription

1 How to download and install the Bloxx Security Certificate November 2016 Version 1.2 Contents Introduction... 2 How does this affect me?... 2 Who can I contact if I have problems installing the certificate?... 2 Bloxx Security Certificate Installation Procedure... 3 Windows Vista, Windows 7, Windows 8 or Windows 10 Devices... 3 For all Browsers: Download the Certificate... 3 Mozilla Firefox... 6 Mac OSx based devices... 7 Android 6.0 based devices... 8 Apple ipad devices Apple iphone devices Chromebook Devices... 14

2 Introduction In order to enhance the security of College staff and students when browsing the internet, it is essential to download and install a Bloxx security certificate if you are using NESCol WiFi. This will allow safe, secure and uninterrupted browsing of all permitted websites including secure sites which begin How does this affect me? The security certificate needs to be installed on any device that you use to connect to the internet while connected to the NESCol network. College Managed Computers: Computers issued by and managed by the College will have the certificate installed on them by the College IT team. You do not need to take any further action if you only use this type of device. BYOD Devices: It is your responsibility to install the certificate on your Bring Your Own Device, even if it was issued to you through the IT HelpZone Student Helpdesk. Personal Devices: It is your responsibility to install the certificate on your personal device. Personal devices include any laptops, tablets or mobile phones that you use to connect to the internet through the NESCol network, which are not issued by the College. Who can I contact if I have problems installing the certificate? If you have any problems you can get help from the IT HelpZone Student Helpdesk which is located: Aberdeen City Campus - in Dino s Café. They can be called on x2510 or Fraserburgh Campus 1 st Floor of Main Atrium near the café. Or call x4321 or Alternatively, and for other Campuses you can them on studenthelpdesk@nescol.ac.uk 2

3 Bloxx Security Certificate Installation Procedure Windows Vista, Windows 7, Windows 8 or Windows 10 Devices The certificate should be downloaded using Internet Explorer or Edge (Windows 10 devices). For all Browsers: Download the Certificate Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Open Internet Explorer (or Edge if using Windows 10). Please note that the screenshots displayed below may vary slightly depending on the version of Operating System and browser being used. Navigate to You will see a certificate warning as below. Confirm that the web page being presented is from the web link previously entered by checking the typed entry at the top of the visible web page. Click on Continue to this website (not recommended). You will then see following pop-up: Click on the drop-down arrow within the Save button and select Save as Save the file to somewhere you will be able to access it, such as your Desktop. Keep the default file name. Once the certificate has been downloaded you will see the following message: Open the location of the file you downloaded in the previous step, by either clicking the Open folder button shown above, or browse to the folder you chose if this pop up has been closed. Find the certificate named ca-cert.pem Right click on the certificate displayed in the window and select Install certificate then Open 3

4 The Certificate Import Wizard window shown opens: Note that Windows 10 devices provide the option to install into Current User or Local Machine locations. Select Current User Click Next and in the following window select Place all certificates in the following store Click Browse The Select Certificate Store window opens. Select Trusted Root Certification Authorities and click OK. or Confirm that the Certificate store: field in the open window is now populated with Trusted Root Certification Authorities. Click Next > 4

5 In the following window confirm that Certificate Store Selected by User is set to Trusted Root Certification Authorities Click Finish and click Yes on any Security Warning pop-up messages. The window will close and the user will be presented with a window confirming The import was successful. Click OK The Windows device is now correctly configured to work with the NESCol WiFi system. Note: If you also use the Mozilla Firefox browser then continue onto the following page to complete the installation process. 5

6 Mozilla Firefox Launch Firefox. In the top right of the Firefox browser window click on the Open menu icon Click on Options and the Options tab will open. Click Advanced then Certificates On the Certificates menu, click View Certificates The certificate manager window opens, click Import The Select File containing CA certificate(s) to import window opens. Navigate to where you downloaded the certificate to in the previous For all Browsers step on page 3. Select the ca-cert.pem certificate. Click Open The following window will open: Tick Trust this CA to identify web sites Click OK The window will close. On the Certificate Manager window, click OK and the window will close. Close the Options tab and you will be returned to the initial Mozilla Firefox Start Page. The Windows (using Mozilla Firefox) device is now correctly configured to work with the NESCol WiFi system. 6

7 Mac OSx based devices Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Open the Safari browser and navigate to The certificate will automatically download and appear as an icon on The Dock Right click on the certificate icon on The Dock and the Keychain Access window will open together with details of the certificate and the option to Always Trust Click on Always Trust An additional pop up window will appear containing the prompt for Name: and Password: Enter the relevant information and click on Update Settings The two windows will close leaving the Keychain Access window. In the window click on Certificates. Click on the certificate and confirm that the message This certificate is trusted for this account is shown next to the certificate icon. Close the Keychain Access window. The Apple device is now correctly configured to work with the NESCol WiFi system. 7

8 Android 6.0 based devices Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Open the browser and navigate to The message illustrated below is displayed. Click on ADVANCED Click on the option PROCEED TO CERTIFICATE NESCOL.AC.UK (UNSAFE) 8

9 Within the following pop-up window name the certificate NESCol and change the Credential use: drop down option to Wi-Fi. Click OK Exit the browser and navigate to: Settings > Security > Trusted Credentials > User Confirm that the Bloxx Ltd certificate is installed. The Android device is now correctly configured to work with the NESCol WiFi system. 9

10 Apple ipad devices Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Open the device browser and navigate to The Install Profile window will pop up showing the certificate and the option to Install. Click Install. Depending on the device security settings configuration there may be the requirement to enter the device passcode. A Warning window will pop up associated with the Installing the certificate with the option to Install. Click Install An Install Profile window will pop up with the option to Install. Click Install 10

11 A confirmatory Profile Installed window will pop up for Click Done From the device home page navigate to Settings > General > Profiles & Device Management and confirm that the College certificate is installed as a configuration profile. The Apple device is now correctly configured to work with the NESCol WiFi system. 11

12 Apple iphone devices Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Open the device browser and navigate to The Cannot Verify Server Identity for certificate.nescol.ac.uk will pop up. Click Continue In the Install Profile pop up window click Install In the Warning pop up window click Install 12

13 In the Enter Passcode pop up window enter relevant passcode for your device. In the Profile Installed pop up window click Done From the device home page click Settings > General > Profile and confirm that the profile is available to the device as a trusted asset as shown below. The Apple device is now correctly configured to work with the NESCol WiFi system. 13

14 Chromebook Devices Connect to the College network as usual (see separate Connecting to the NESCol WiFi instructions) Navigate to Open the Chrome browser and enter chrome://settings/certificates in the address bar and hit Enter The Certificate Manager window opens Click on the Authorities tab and click Import at the bottom of the window. The file browsing window opens. Navigate to the place where the downloaded certificate is located. Note that if the certificate is not displayed in the expected location change the drop down list at the bottom of the window to All files Select the downloaded certificate file and click Open At the pop up Certificate authority window tick Trust this certificate for identifying websites and Trust this certificate for identifying users. Click the OK button. Confirm that browsing occurs without receiving certificate warnings. The Chromebook device is now correctly configured to work with the NESCol WiFi system. 14