I want to put Zscaler Root CA certificate for web access by terminal
Hi Team, I'm using the Zscaler in my network, when I use the Firefox, appear the error:
"Software is Preventing Firefox From Safely Connecting to This Site
www.googleadservices.com is most likely a safe site, but a secure connection could not be established. This issue is caused by Zscaler Root CA, which is either software on your computer or your network.
What can you do about it?
www.googleadservices.com has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely...." Picture 1
I have root certificate in path: /usr/share/ca-certificates/mozilla$ Picture 2
I run the command for updates CA but it doesn't work: sudo update-ca-certificates
Errors keep popping up.
The certificate not appear in the Certificate manager > Authorities Picture 3
But if I open the firefox > Settings > Privacy & Security> Certifcates > View Certificates > Import And I import the certificate ZscalerRoot.crt and I mark the option "trust this CA to identify websites" the firefox works, and I can open the site without error message.
Picture 4
And the certificate appear in the manager certificate: Picture 5
How can I put the command terminal certificate, which I have on hundreds of machines?
Note: I need to put the certificate only for internet access.
Все ответы (4)
walter.sena.m said
How can I put the command terminal certificate, which I have on hundreds of machines?
I have not tested it, but the Policy mechanism includes an instruction to import a certificate:
- Syntax: https://github.com/mozilla/policy-templates#certificates--install
- Implementation Option #1: Customizing Firefox Using Group Policy (Windows)
- Implementation Option #2: Customizing Firefox Using policies.json
Note: I am flagging this thread to move to the "Firefox for Enterprise" forum so you can get more detailed assistance.
I don't know where I create these policies, do you have the path in Linux for me to create this?
On the Troubleshooting Information page, you can find the location of the "Application Binary" (see: Use the Troubleshooting Information page to help fix Firefox issues).
Within that same directory, create a subdirectory named distribution and put your policies.json file into that distribution directory.
As a Windows person, that's about as much as I can tell you...