Root CA Certificate Installation Guide
To control web application access through WAC, the Root CA certificate must be installed on the user's local PC.
1. Certificate Download
Enter the following path in your web browser to download the appropriate Root CA certificate for your environment.
{QueryPie_Host}/api/user/wac/certificate/download
2. Certificate Installation
Install the downloaded Root CA certificate on your local PC.
Administrator privileges are required to configure the certificate.
MacOS
You can install the Root CA certificate using the Keychain Access app.
Open the Keychain Access app via Spotlight.
On the Keychain Access screen, drag and drop the downloaded certificate file. The newly installed QueryPie certificate is not trusted by default.
Double-click the QueryPie certificate to open the modal, click on the Trust section to expand it, change When using this certificate to
Always Trust
, and then close the modal.Additional authentication is required to change the system certificate trust settings.
The newly installed QueryPie certificate is marked as trusted for all users.
Alternatively, you can run the following command in the Terminal to set it up in the same way.
cd {Root CA Downloaded Path}
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain qp-wac-rootCA.cer
Windows
You can install the Root CA certificate through the Certificate Import Wizard.
Open the folder containing the downloaded Root CA certificate in Windows Explorer.
Right-click the certificate file, select
Install Certificate (I)
from the context menu to start the Certificate Import Wizard.When the Certificate Import Wizard window opens, select
Current User (C)
for the store location and click theNext (N)
button.For the certificate store, select the
Place all certificates in the following store (P)
option and click theBrowse (R)...
button.When the Certificate Store Selection modal opens, select Trusted Root Certification Authorities. Leave the Show physical stores option unchecked and click the OK button.
Verify the certificate store settings and click the
Next (N)
button.Review the configuration and click the
Finish (F)
button.A security warning modal will appear. Click the
Yes (Y)
button to proceed with the certificate import. Once the import is complete, click the OK button in the completion modal.
3. Chrome Certificate Settings Verification
To verify if the certificate has been properly set up, follow these steps:
Open chrome://certificate-manager/localcerts in the Chrome browser.
Click on View Certificates Imported from macOS or View Certificates Imported from Windows.
In the list of trusted certificates, check for the querypie certificate.