import { CertificateDownload } from '../../../components/CertificateDownload'

# Installing Root CA

To ensure your browser trusts certificates issued by TrustLab, you must install our Root CA.

<div className="my-8">
  <CertificateDownload />
</div>

## Quick Installation (Recommended)

Instantly install all TrustLab Root & Intermediate certificates using our automated scripts.

import { Tabs } from 'nextra/components'

### Linux / Server (CLI)

Select your distribution to get the optimized installation command:

<Tabs items={['Debian/Ubuntu', 'RHEL/CentOS', 'Arch Linux', 'Universal']}>
  <Tabs.Tab>
    ```bash
    sudo apt update && sudo apt install -y curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    (sudo yum install -y curl || sudo dnf install -y curl) && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    sudo pacman -Sy --noconfirm curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
  <Tabs.Tab>
    ```bash
    curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
    ```
  </Tabs.Tab>
</Tabs>

### Windows
[Download Auto-Installer (.bat)](https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.bat)  
*Right-click and Run as Administrator explicitly.*

### macOS / iOS
[Download Configuration Profile (.mobileconfig)](https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.mobileconfig)  
*Go to System Settings > Privacy & Security > Profiles to install after downloading.*

---

import { Steps } from 'nextra/components'

## Manual Installation Guide

If you prefer to install certificates manually, follow these steps for your operating system.

<Tabs items={['Windows', 'macOS', 'Android', 'Linux']}>
  <Tabs.Tab>
    <Steps>
      ### Download Certificates
      Download the certificates you need:
      *   **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** (Required)
      *   [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
      *   [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)

      ### Install Root CA
      Double-click `dydev-its-true.crt` -> **Install Certificate**.
      Select **Local Machine** -> Place in **Trusted Root Certification Authorities**.

      ### Install Intermediates (Optional)
      If installing Intermediates:
      Double-click the file -> **Install Certificate**.
      Select **Local Machine** -> Place in **Intermediate Certification Authorities**.
    </Steps>
  </Tabs.Tab>
  <Tabs.Tab>
    <Steps>
      ### Download Certificates
      *   **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
      *   [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
      *   [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)

      ### Add to Keychain
      Double-click all downloaded files to open **Keychain Access**.
      Ensure they are added to the **System** keychain.

      ### Trust Root CA
      Find "DyDev Its True" (Root CA) in the list.
      Expand **Trust** -> Change to **Always Trust**.
      *(Intermediates do not need manual trust settings if Root is trusted)*.
    </Steps>
  </Tabs.Tab>
  <Tabs.Tab>
    <Steps>
      ### Download Certificates
      *   **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
      *   [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)

      ### Install via Settings
      Go to **Settings** > **Security** > **Encryption & Credentials**.
      Tap **Install a certificate** > **CA Certificate**.
      Select and install the Root CA first, then the Intermediates.
    </Steps>
  </Tabs.Tab>
  <Tabs.Tab>
    <Steps>
      ### Download
      Download the files using `curl`:
      ```bash
      # Root CA
      curl -LO https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt
      
      # Intermediates
      curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt
      curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt
      ```

      ### Install (Debian/Ubuntu)
      Copy all `.crt` files to the CA directory:
      ```bash
      sudo cp *.crt /usr/local/share/ca-certificates/
      ```

      ### Update Store
      Update the CA store:
      ```bash
      sudo update-ca-certificates
      ```
      *For RHEL/CentOS, copy to `/etc/pki/ca-trust/source/anchors/` and run `update-ca-trust`.*
    </Steps>
  </Tabs.Tab>
</Tabs>