diff --git a/site/content/en/post/2024/02/add-trusted-root-certificate-authority.md b/site/content/en/post/2024/02/add-trusted-root-certificate-authority.md index 6eec398..93b6a81 100644 --- a/site/content/en/post/2024/02/add-trusted-root-certificate-authority.md +++ b/site/content/en/post/2024/02/add-trusted-root-certificate-authority.md @@ -132,6 +132,8 @@ From this point, it will be imported into the System Keychain, but not trusted y {{< imgItem src="/images/posts/2024/02/root-ca/mac-keychain-access-screen.png" alt="Open the Keychain Access app" >}} {{< imgItem src="/images/posts/2024/02/root-ca/mac-unlock-keychain.png" alt="Unlock the System Keychain" >}} {{< imgItem src="/images/posts/2024/02/root-ca/mac-imported-untrusted.png" alt="Use the File menu to Import the Certificate" >}} +{{< /imgSet >}} +{{< imgSet cols="3" name="mac-gui" >}} {{< imgItem src="/images/posts/2024/02/root-ca/mac-imported-untrusted-right-click.png" alt="Right click on the Certificate, select 'Get Info...'" >}} {{< imgItem src="/images/posts/2024/02/root-ca/mac-trust-settings.png" alt="Toggle the Always Trust settings" >}} {{< imgItem src="/images/posts/2024/02/root-ca/mac-trusted-cert.png" alt="Enjoy your newly trusted Root CA" >}} @@ -170,9 +172,13 @@ Next up, everyone's favorite side-piece: Windows. Windows can install a variety {{< imgItem src="/images/posts/2024/02/root-ca/windows-downloaded-cert.png" alt="Find the certificate file in Windows Explorer, open it" >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-open-cert.png" alt="Click 'Yes' in the pop up when it asks you if you want to do what you want to do..." >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-cert-untrusted-details.png" alt="Click the 'Import Certificate...' button" >}} +{{< /imgSet >}} +{{< imgSet cols="3" name="windows-gui" >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-cert-local-computer.png" alt="Select 'Local Machine' for the Store Location" >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-cert-uat.png" alt="Annoying UAC prompt" >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-cert-selected-store.png" alt="Place it in the 'Trusted Root Certification Authorities' Store" >}} +{{< /imgSet >}} +{{< imgSet cols="3" name="windows-gui" >}} {{< imgItem src="/images/posts/2024/02/root-ca/windows-cert-finish-import.png" alt="Finish the import" >}} {{< /imgSet >}} @@ -206,14 +212,20 @@ This is honestly the weirdest workflow of them all - you have to do things is a {{< imgItem src="/images/posts/2024/02/root-ca/ios-download-prompt.png" alt="May also need to tap the Download prompt at the bottom of your browser" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-open-in.png" alt="Following the Download prompt, there may be an Open in... prompt" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-save-to-files.png" alt="Select the 'Save to Files' option when downloading/opening" >}} +{{< /imgSet >}} +{{< imgSet cols="4" name="ios" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-files-view.png" alt="Open the Files app and navigate to where you saved the Certificate on the iPhone - tap on it" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-add-to-iphone.png" alt="Tap 'iPhone' when prompted which device to install the Certificate to" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-profile-downloaded.png" alt="Close the Profile Downloaded pop up when prompted" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-settings-view-profile-downloaded.png" alt="Open the Settings app - click on the Profile Downloaded button at the top" >}} +{{< /imgSet >}} +{{< imgSet cols="4" name="ios" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-profile-not-verified.png" alt="In the Install Profile card that pops up, tap the Install button" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-install-warning.png" alt="A Warning card will pop up, tap the Install button again" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-profile-installed.png" alt="You should see the Profile Installed and Verified, but not yet enabled as a trusted Root CA" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-general-about.png" alt="In the Settings app, navigate to General > About and at the bottom click on the 'Certificate Trust Settings' button" >}} +{{< /imgSet >}} +{{< imgSet cols="4" name="ios" >}} {{< imgItem src="/images/posts/2024/02/root-ca/ios-enable-root-warning.png" alt="Tap the toggle switch for the Root CA, click Continue in the pop up" >}} {{< /imgSet >}} @@ -240,6 +252,8 @@ This is an instance where things can vary - since different handset manufacturer {{< imgItem src="/images/posts/2024/02/root-ca/android-download-install-fail.jpg" alt="If downloading, you'll get this error - that's ok" >}} {{< imgItem src="/images/posts/2024/02/root-ca/android-settings-biometrics-and-security-other-security-settings.jpg" alt="In the Settings app, navigate to Biometrics and Security, tap 'Other Security Settings' at the bottom" >}} {{< imgItem src="/images/posts/2024/02/root-ca/android-other-security-settings.jpg" alt="Select the Install from device storage" >}} +{{< /imgSet >}} +{{< imgSet cols="5" name="android" >}} {{< imgItem src="/images/posts/2024/02/root-ca/android-privacy-risk-install-anyway.jpg" alt="Blow past the prompt and click 'Install anyway'" >}} {{< imgItem src="/images/posts/2024/02/root-ca/android-install-from-device-storage.jpg" alt="Select 'CA Certificate'" >}} {{< imgItem src="/images/posts/2024/02/root-ca/android-select-certificate.jpg" alt="Navigate to and select the Certificate file in the browser" >}}