How to install root CA certificate in Windows & FireFox? - LabCollector

Search Knowledge Base by Keyword

How to install root CA certificate in Windows & FireFox?

You are here:
← All Topics

In certain scenarios, you may find the need to access LabCollector or the scan server utility from a computer other than the one where it is initially installed, often referred to as client computers.

The primary computer or server where LabCollector or Scan Server utility is originally installed typically establishes an HTTPS connection. The successful establishment of this connection relies on the correct installation of security certificates during the setup process.

However, client computers may lack these necessary certificates, which can result in an error message such as ‘There is a problem with this website’s security certificate.‘ This error can lead to browsers blocking communication with the intended website.

To address this issue and ensure seamless and secure connections from client computers, it becomes imperative to install the root Certificate Authority (CA) certificate, particularly when dealing with self-signed certificates. Throughout this Knowledge Base, we will demonstrate the process of installing a root CA certificate. We will use the example root CA certificate, referenced as ‘rootCA.pem,’ for illustrative purposes.

SUMMARY:
  1. How to install Certificates in Windows?
  2. How to install Certificates in Firefox?

How to install Certificates in Windows?

Step 1: Open Certificate Manager

1. Press the `Win key + R` hotkey to open the Run dialog box.

2. Type `certmgr.msc` and press Enter. This action will open the Certificate Manager.

Step 2: Access Trusted Root Certification Authorities

3. In the Certificate Manager window, navigate to the `Trusted Root Certification Authorities` folder in the left-hand panel.

4. Right-click on `Certificates` within this folder to open a context menu.

Step 3: Import the Root CA Certificate

5. Select `All Tasks` > `Import` from the context menu. This will open the Certificate Import Wizard.

6. Click the `Next` button to proceed.

7. Click the `Browse` button to locate the root CA certificate file (`rootCA.pem`) saved on your hard drive. Select the file and click `Open`.

8. Click `Next` again to select the option `Automatically select the certificate store based on the type of certificate`.

9. Finally, click `Next` > `Finish` to complete the import wizard. A confirmation window will appear, indicating that “the import was successful.

How to install Certificates in Firefox?

Step 1: Open Firefox Options

1. Launch Mozilla Firefox.

2. Click the three horizontal lines (hamburger menu) in the top-right corner to open the menu.

3. Select `Options` from the menu. This will open the Firefox Options page.

Step 2: Access Certificate Manager

4. In the left-hand navigation pane, scroll down and click on `Privacy & Security`.

5. Scroll further down to the `Certificates` section and click on `View Certificates`.

Step 3: Import the Root CA Certificate

6. In the Certificate Manager, go to the `Authorities` tab.

7. Click the `Import` button to initiate the Certificate Import Wizard.

8. Click the `Next` button to continue.

9. In the file dialog, browse to the location where you have the root CA certificate file (`rootCA.pem`) saved on your computer. Select the file and click `Open`.

10. Ensure the box that says “Trust this CA to identify websites” is checked to establish trust in this certificate authority.

11. Click `Next` to proceed.

12. Choose the option “Automatically trust ‘rootCA.pem’ for websites” and click `Next`.

13. Click `Finish` to complete the import process.

14. A confirmation dialog will appear, indicating that the import was successful. Click `OK` to close it.

Step 4: Restart Firefox

15. To ensure that the changes take effect, close and reopen Firefox.

Step 5: Verify the Installation

16. To confirm that the root CA certificate is installed correctly, go to LabCollector – Scan Server utility from Firefox on your client computer. You should no longer receive security certificate errors, and the browser will establish secure connections.

Note

If you encounter issues with certificates for RackScanner, follow these steps:

  1. Visit the RackScanner URL in a new tab: https://XXXXXXXXXXXX:5353 (where XXXXXXXXXXXX is the appropriate server address).
  2. When the security warning appears, click “Advanced.”
  3. Select “Accept the risk and continue” or “Proceed to unsafe URL.”

    Related topics: