UbuntuSSLCertificateInstallationVersion1.2.1

December2016

2

Introduction

ThepurposeofthisdocumentistodescribehowtogettheCatoSSLCertificateanddeployitlocallyonUbuntu.

Overview

InstallingtheCatoNetworksCertificate,andaddingitasatrustedapplication,allowsuserstobenefitfromCatosecurityservicesandreducetheextrasystemnotificationsproducedbythefollowinginstances:

• BlockHTTPStraffic:IfSSLtrafficisbeingblocked(i.e.URLfiltering,InternetFirewallrules),CatoNetworkCertificateallowsaccesstoblockedpages.

• TLSinspectiononclient’straffic:IfTLSisenabled,thewebbrowserpromptsthattheconnectionisnotprivate(asexpectedcertificatewassupposedtobeissuedbythetarget).TheCatoNetworkCertificatebypassesthisnotification.

InstallingonUbuntu

1. OpentherelevantPEMfile2. Thefollowingpopupopens.PressImport

3. Uponsuccessfulinstalltion,pressDone.

InstallingonFireFox

SinceFirefoxdoesnotusetheoperatingsystem’scertificatestorebydefault,pleasefollowthebelowstepsformore

1. AccesstheImportcertificatescreen(underPreferences->Advanced)2. Click“ViewCertificates”3. Click“Import”4. Navigatetowhereyoustoredthecertificateandclick“Open”5. Click“Import”.ThedownloadingCertificatedialogdisplays.

a. Select“TrustthisCAtoidentifywebsites”andclickOK

Additionalresources

IncaseofissuespleasecontactCatoNetwork’ssupportatsupport@catonetworks.com