Change the HTTPS Inspection certificate

For HTTPS inspection to work, users must install a valid certificate from Smoothwall onto their device. This article will explain how to change the certificate that can be downloaded, for example, if your existing one expires soon.

Before you begin

• Renew your Certificate Authority (CA).
• If you have a centrally managed Smoothwall configuration, ensure Smoothwall will add the parent node's HTTPS certificate to all child nodes:
  1. Go to System > Maintenance > Archives.
  2. For each Child node Replication profile, ensure the checkbox for Certificates under System is selected.
  3. Go to the bottom of the page and select Save.
  4. Repeat for all child nodes.

Change the certificate

1. Go to Guardian > HTTPS inspection > Settings.
2. Go to the Manage HTTPS interception certificates section.
3. Change the Certificate Authority used to sign for certificates using the drop-down.
4. (Optional) You can download the Certificate Authority by selecting Export.
5. When a client browses to a HTTPS website that Smoothwall hasn't seen before, Smoothwall creates a certificate for the site, gives it to the client, and stores it in Smoothwall’s cache to be used by other clients visiting the website. If you have changed your root Certificate Authority, you can clear the cache of certificates by selecting Clear and restart.
   

     Note

   Clearing the cached certificates restarts Web Filter, so only do this out of hours.

6. Select Save.