Installing an NG Firewall root certificate on Apple iOS

Overview

SSL/TLS inspection requires each client device to install and trust the root certificate of your Untangle NG Firewall. This article describes the steps to install your root certificate on iOS devices.

Confirm your root certificate

Before you begin to distribute your root certificate, make sure the hostname of your firewall matches the Common Name (CN) on your root certificate. The default root certificate uses www.untangle.com. If you prefer to customize the hostname value, click "Generate Certificate Authority" in Config > Administration > Certificates. Refer to Certificates in the wiki for more details.

Install the root certificate to the iOS device

1. Open the Safari browser on the device and navigate to http://192.168.2.1/cert where 192.168.2.1 represents the IP address or hostname of your NG Firewall.
2. Tap Allow.
   
3. Open the Settings app and tap the new profile at the top of the menu.
4. Tap Install.
   

Trust the root certificate

1. In the Settings app, navigate to General > About > Certificate Trust Settings.
2. Locate your certificate and tap to enable full trust.