Installing the Internal Root CA Certificate in a Anyware client

Your root CA certificate must be installed in any Anyware client that will be used to connect to the Anyware agent.

Installing Root CA Certificates on a Zero Client

Zero clients are managed via an Administrative Web Interface (AWI) and accessed using a web browser. Supported browsers are:

• Firefox 86
• Chrome 60
• Internet Explorer 11
• Microsoft Edge 25

To upload the root CA certificate to a zero client:

1. From a supported browser, enter the IP address of the zero client and log in to its Administrative Web Interface.
2. Select the Upload > Certificate menu to display the Certificate Upload page.
3. In the Certificate filename field, click Browse, and then navigate to the directory that contains your root CA certificate.
4. Select your root CA certificate (*.pem) and then click Open.
5. Click Upload and then OK.
6. Click Continue.

If the certificate uploads successfully, it will appear in the Uploaded Certificates section on this page.

Installing Root CA Certificates on a Software Client

Before you can install the root CA certificate in an Anyware Mobile Client, you must change the file extension from .pem to .crt.

The .pem extension is used for different types of X509 v3 files that contain ASCII Armor (Base64) data prefixed with a "-----BEGIN" line. The .crt extension is used for certificates that may be encoded either in binary DER format or ASCII PEM format.

Installing Root CA Certificates in the Anyware Software Client for macOS

In macOS, certificates are stored in the Keychain Access application.

To import your root CA certificate in the Anyware Software Client for macOS:

1. Copy your root CA certificate file (*.crt) to the Mac client desktop.
2. Double-click Applications > Utilities Keychain Access.app to open Keychain Access.
3. Select File > Import Items.
4. Navigate to the desktop and then select your root CA certificate.
5. In the Destination Keychain drop-down menu, select System, and then click Open.
6. If prompted, enter your Keychain Access password and then click Modify Keychain.
7. At the next screen, click Always Trust when asked whether you want your computer to trust certificates signed by this certificate.
8. If prompted, enter your Keychain Access password and then click Update Settings.

After the certificate installs successfully, it appears in the System > Certificates list.

Installing Root CA Certificates in the Anyware Software Client for Windows

The following instructions explain how to add a root CA certificate to the Trusted Root Certification Authorities store on a client PC using Microsoft Management Console.  

To import the root CA certificate for the Anyware Software Client for Windows:

1. Copy your root CA certificate file (*.crt) to a directory reachable by your Windows client.

2. Open the Microsoft Management Console on the agent machine:

   1. Press
      
      + r to open the run dialog
   2. type mmc and press Enter.

3. Add the Certificates snap-in:

   1. Select File > Add/Remove Snap-in.
   2. Select Certificates from the Available snap-ins list and then click Add.
   3. Select My user account and then click Finish.
   4. Click OK.

4. Import the root CA certificate:

   1. Expand Certificates - Current User.
   2. Right-click on Trusted Root Certification Authorities, select All Tasks > Import from the context menu, and then click Next.
   3. Use the Browse button to navigate to the directory where your root CA certificate is located and select your root CA certificate.
   4. Click Open and then Next.
   5. Select the option to place all certificates in the Trusted Root Certification Authorities certificate store.
   6. Click Next and then Finish.
   7. At the security warning, click Yes.

After the certificate installs successfully, it appears in the Trusted Root Certification Authorities > Certificates list.

Installing in a Anyware Mobile Client

To install your internal root CA certificate on an iOS, Android, or ChromeOS device, consult the documentation for your device. The Anyware Mobile Client software does not implement certificate installation.

Verifying Certificate Formats

If you have OpenSSL installed on your system, you can use it to verify that your root CA certificate is in ASCII PEM format.

To verify that the root CA certificate is in ASCII PEM format:

1. Launch openssl from the C:\OpenSSL-Win32\bin directory.
2. Type the following command:

   x509 -in rootCA.pem -text -noout
   

If your certificate contents successfully display on the screen, it is encoded correctly as a PEM file.