LevelBlue Completes Acquisition of Cybereason.  Learn More

LevelBlue Completes Acquisition of Cybereason.  Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
View All Services
Solutions
BY INDUSTRY
BY REGULATION
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
We reduce cyber risk and fortify organizations
Awards and Accolades
Recognition by analysts and media outlets
LevelBlue SpiderLabs
Global researchers, ethical hackers, and responders
LevelBlue Security Operations Platforms
Unprecedented security visibility and control
Security Colony
Access to cybersecurity threat protection resources
Partners
Microsoft Security
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Register
Login
Resources
BLOGS
UPCOMING
MEDIA & ASSETS
NOTICES
HELP
Loading...
Loading...

LevelBlue Knowledge Base

Home » Knowledgebase » Legacy Products » Secure Web Gateway » HOWTO: Importing SWG Certificate on Mac OSX Safari Browser

HOWTO: Importing SWG Certificate on Mac OSX Safari Browser

Expand / Collapse
Show/Hide Article Tools


This article applies to:

  • Mac OSX 10.7.4 and Safari 5.1.7
  • SWG 10.x

Symptoms:

  • When browsing to a secure website via SWG on a Mac OSX Safari browser, it may present a warning that it can't verify the identity of the website and that the certificate for the website is invalid.


Causes:

  • This is because with SWG’s HTTPS Scanning module turned on, it will use it’s own SSL certificate to decrypt and encrypt SSL traffic for scanning. So the client will need to import and trust SWG’s certificate in its certificate store.

Resolution:

Logon to your SWG All-In-One or Policy Server web administration GUI and export the Scanning Server HTTPS certificate as shown in the screenshot below. The exported file will have a .crt extension and will need to be copied to and deployed on all Mac OSX clients.


On the Mac client, open the .crt file in Finder:

The Keychain Access app will start and prompt you to authenticate. Enter the administrator username and password.


 

The Keychain Access app will next prompt you if you want to trust the certificate. Ensure that the System Keychain is selected on the left pane and select Always Trust. (Note the SWG certificate name will differ according to your installation, SWG83SelfSigned is just an example).




Next browse to a secure website with Safari and verify the SSL certificate details. In the example screenshot below, we browsed to https://www.google.com and the SSL cert from SWG is now trusted and valid in Safari.

To contact LevelBlue about this article or to request support:

Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster.


Execution: 0.031. 8 queries. Compression Disabled.
Powered by InstantKB.NET