import { Tabs, Steps, Cards, Card, Callout } from 'nextra/components'
import { Monitor, Smartphone, AlertTriangle, Info } from 'lucide-react'

# Installing Root CA

To ensure your browser trusts certificates issued by TrustLab, you must install our Root CA.

## Quick Installation (Bundle)

Instantly install **ALL** TrustLab Root & Intermediate certificates using our automated bundle scripts.

### Linux / Server (CLI)

Select your distribution to get the optimized installation command:

<Tabs items={['Debian/Ubuntu', 'RHEL/CentOS', 'Arch Linux', 'Universal']}>
  <Tabs.Tab>
    ```bash
    sudo apt update && sudo apt install -y curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    (sudo yum install -y curl || sudo dnf install -y curl) && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    sudo pacman -Sy --noconfirm curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
</Tabs>

### Windows & Apple Ecosystem

<Cards>
  <Card icon={<Monitor className="w-6 h-6" />} title="Windows Bundle Installer (.bat)" href="https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.bat" arrow />
  <Card icon={<Smartphone className="w-6 h-6" />} title="macOS / iOS Profile (.mobileconfig)" href="https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.mobileconfig" arrow />
</Cards>

<Callout type="warning" emoji={<AlertTriangle className="w-5 h-5" />}>
  **Windows Users:** You **MUST** right-click the `.bat` file and select **"Run as Administrator"**. Double-clicking directly will likely fail due to permission restrictions.
</Callout>

<Callout type="info" emoji={<Info className="w-5 h-5" />}>
  **Apple Users:** After downloading the profile, go to **System Settings > Privacy & Security > Profiles** to install it. For iOS, see the *Individual Installation* section below for detailed trust steps.
</Callout>

---

import { DynamicInstallationGuide } from '../../../components/DynamicInstallationGuide'

## Individual Certificate Installation

If you need to install specific certificates individually (e.g. only Root, or specific Intermediate), use the live guide below.

<DynamicInstallationGuide />