Certificates
Go to Settings > Certificates to download an SSL or PEM certificate(s).
- If a Web Protection certificate has not been installed and a user visits an HTTPS-enabled website that is blocked by a policy, their browser will return a certificate error page instead of your Web Protection block page. To avoid this, download an SSL Certificate and import it into your user's browser.
- If you are installing Web Protection OTG 2 for Chromebooks, download the .PEM format certificate to import into your Google Workspace.
Downloading an SSL or PEM Certificate
Follow the steps below to download an SSL or PEM certificate.
- Go to Settings > Certificates.
- Select Download under SSL or PEM to automatically download an SSL (ca.der) or PEM (ca.pem) certificate.
- Once downloaded, the certificate needs to be installed or deployed to all computers that are being filtered by Web Protection. This can be done directly or using Group Policy (GPO) or similar software.
Importing a Web Protection TLS Root Certificate in Google Workspace
If a TLS root certificate has not been installed and a user visits an HTTPS-enabled website that is blocked by a policy, their browser will return a certificate error page instead of a Web Protection block page. This can be confusing for the user. To avoid this, download and import the Web Protection TLS root certificate.
Follow these steps to download and import a .pem Web Protection TLS root certificate to Google Workspace.
- Go to Settings > Certificates.
- Select the Download button under PEM Certificate to automatically download ca.pem. Take note of the download location of this file on your computer.
- Log into your Google Workspace account.
- From the main menu, go to Devices > Network > Certificates.
- Select the OU you want this certificate to be available to. A child OU inherits settings from its parent OU, so in the example below if a certificate is added to OTG-DocsTest-Chromebook, it will be inherited by OTG-Students and OTG-Teachers.
- Click ADD CERTIFICATE.
- Click Upload and select the certificate downloaded in Step 2 above. Click Open.