Adding Server Certificate to Client Workstations
Client workstations need to trust the ClearOS server as a Certificate Authority in order to properly recognize certificates signed by the server. This process is useful so that all secure transactions between the workstation and the server can proceed without the typical warnings that would commonly be given. Some services that use certificates include:
- Web Server
- Webconfig
- POP3S/IMAPS
- FTPS
- Wireless/HostAPD
Getting the CA Certificate
It is recommended that in an office environment that the installation of the ClearOS CA certificate be performed on all workstations that will connect to the server. Distribution of the certificate can be accomplished by using a USB key or in some cases, can be distributed by the login script (Windows Networking Method).
First, you must have already completed the Install wizard in the ClearOS Webconfig. The section that is vital is the 'Organization Information'. ClearOS uses this information to craft the Certificate Authority (CA).
The CA certificate is located at /etc/ssl/ca-cert.pem. You can download in Webconfig from
Windows Client Configuration
Mac OSX Configuration
Open up Keychain Access in Mac OSX (
Insert your credentials.