Root CA Certificate Installation Guide

To control web application access through WAC, the Root CA certificate must be installed on the user's local PC.

1. Certificate Download

Enter the following path in your web browser to download the appropriate Root CA certificate for your environment.

CODE

{QueryPie_Host}/api/user/wac/certificate/download

Install the downloaded Root CA certificate on your local PC.

Administrator privileges are required to configure the certificate.

You can install the Root CA certificate using the Keychain Access app.

Open the Keychain Access app via Spotlight.
On the Keychain Access screen, drag and drop the downloaded certificate file. The newly installed QueryPie certificate is not trusted by default.
Double-click the QueryPie certificate to open the modal, click on the Trust section to expand it, change When using this certificate to Always Trust, and then close the modal.
Additional authentication is required to change the system certificate trust settings.
The newly installed QueryPie certificate is marked as trusted for all users.

Alternatively, you can run the following command in the Terminal to set it up in the same way.

CODE

cd {Root CA Downloaded Path}
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain qp-wac-rootCA.cer

You can install the Root CA certificate through the Certificate Import Wizard.

Open the folder containing the downloaded Root CA certificate in Windows Explorer.
Right-click the certificate file, select Install Certificate (I) from the context menu to start the Certificate Import Wizard.
When the Certificate Import Wizard window opens, select Current User (C) for the store location and click the Next (N) button.
For the certificate store, select the Place all certificates in the following store (P) option and click the Browse (R)... button.
When the Certificate Store Selection modal opens, select Trusted Root Certification Authorities. Leave the Show physical stores option unchecked and click the OK button.
Verify the certificate store settings and click the Next (N) button.
Review the configuration and click the Finish (F) button.
A security warning modal will appear. Click the Yes (Y) button to proceed with the certificate import. Once the import is complete, click the OK button in the completion modal.

To verify if the certificate has been properly set up, follow these steps:

Open chrome://certificate-manager/localcerts in the Chrome browser.
Click on View Certificates Imported from macOS or View Certificates Imported from Windows.
In the list of trusted certificates, check for the querypie certificate.