Root CA Certificate Installation Guide

To use web application access control via WAC, the Root CA certificate must be installed on the user's local PC.

1. Download the Certificate

Entering the following path in a web browser will download the appropriate Root CA certificate for your environment:

{QueryPie_Host}/api/user/wac/certificate/download

2. Install the Certificate

Install the downloaded Root CA certificate on your local PC.

Administrator privileges are required for certificate settings.

MacOS

You can install the Root CA certificate using the Keychain Access app.

1. Launch the Keychain Access app (you can find it using Spotlight).

2. Drag and drop the downloaded certificate file into the Keychain Access app window. The newly installed QueryPie certificate will not yet be trusted.

3. Double-click the QueryPie certificate to open its details. Expand the Trust section. For the When using this certificate: option, change the setting from Use System Defaults to Always Trust, then close the window. (Illustrative image: Actual UI may vary)

   

4. Authenticate with your system credentials if prompted to confirm changes to system certificate trust settings.

5. The newly installed querypie certificate will now be shown as trusted for all users.

   

Alternatively, you can achieve the same result by running the following commands in Terminal:

cd {Root CA Downloaded Path}
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain qp-wac-rootCA.cer

Windows

You can install the Root CA certificate using the Certificate Import Wizard.

1. In Windows Explorer, open the folder containing the downloaded Root CA certificate.

2. Right-click the certificate file and select Install Certificate from the context menu to start the Certificate Import Wizard.

3. When the Certificate Import Wizard opens, select Current User as the Store Location and click the Next button.

   

4. For the Certificate store, select the Place all certificates in the following store option and click the Browse... button.

5. When the Select Certificate Store modal opens, select Trusted Root Certification Authorities. Keep the Show physical stores option (if visible) unchecked. Click the OK button.

   

6. Verify the Certificate store settings (Trusted Root Certification Authorities should be displayed) and click the Next button.

   

7. Review your settings and click the Finish button.

   

8. A Security Warning modal may appear, asking if you want to install this certificate. Click the Yes button to proceed with the certificate import. Click OK on the import completion modal.

   

3. Verify Chrome Certificate Settings

To verify that the certificate is correctly set up in Chrome:

1. In the Chrome browser, open chrome://settings/certificates.

2. Click the Authorities tab.

3. Look for the querypie certificate in the list of trusted root certification authorities to confirm its installation.