Files
trustlab-docs/pages/guide/getting-started/install-root-ca.mdx

137 lines
4.7 KiB
Plaintext

import { CertificateDownload } from '../../../components/CertificateDownload'
# Installing Root CA
To ensure your browser trusts certificates issued by TrustLab, you must install our Root CA.
<div className="my-8">
<CertificateDownload />
</div>
## Quick Installation (Recommended)
Instantly install all TrustLab Root & Intermediate certificates using our automated scripts.
import { Tabs } from 'nextra/components'
### Linux / Server (CLI)
Select your distribution to get the optimized installation command:
<Tabs items={['Debian/Ubuntu', 'RHEL/CentOS', 'Arch Linux', 'Universal']}>
<Tabs.Tab>
```bash
sudo apt update && sudo apt install -y curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
```
</Tabs.Tab>
<Tabs.Tab>
```bash
(sudo yum install -y curl || sudo dnf install -y curl) && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
```
</Tabs.Tab>
<Tabs.Tab>
```bash
sudo pacman -Sy --noconfirm curl && curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
```
</Tabs.Tab>
<Tabs.Tab>
```bash
curl -sL https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.sh | sudo bash
```
</Tabs.Tab>
</Tabs>
### Windows
[Download Auto-Installer (.bat)](https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.bat)
*Right-click and Run as Administrator explicitly.*
### macOS / iOS
[Download Configuration Profile (.mobileconfig)](https://cdn.trustlab.dyzulk.com/ca/bundles/trustlab-all.mobileconfig)
*Go to System Settings > Privacy & Security > Profiles to install after downloading.*
---
import { Steps } from 'nextra/components'
## Manual Installation Guide
If you prefer to install certificates manually, follow these steps for your operating system.
<Tabs items={['Windows', 'macOS', 'Android', 'Linux']}>
<Tabs.Tab>
<Steps>
### Download Certificates
Download the certificates you need:
* **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** (Required)
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
* [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)
### Install Root CA
Double-click `dydev-its-true.crt` -> **Install Certificate**.
Select **Local Machine** -> Place in **Trusted Root Certification Authorities**.
### Install Intermediates (Optional)
If installing Intermediates:
Double-click the file -> **Install Certificate**.
Select **Local Machine** -> Place in **Intermediate Certification Authorities**.
</Steps>
</Tabs.Tab>
<Tabs.Tab>
<Steps>
### Download Certificates
* **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
* [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)
### Add to Keychain
Double-click all downloaded files to open **Keychain Access**.
Ensure they are added to the **System** keychain.
### Trust Root CA
Find "DyDev Its True" (Root CA) in the list.
Expand **Trust** -> Change to **Always Trust**.
*(Intermediates do not need manual trust settings if Root is trusted)*.
</Steps>
</Tabs.Tab>
<Tabs.Tab>
<Steps>
### Download Certificates
* **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
### Install via Settings
Go to **Settings** > **Security** > **Encryption & Credentials**.
Tap **Install a certificate** > **CA Certificate**.
Select and install the Root CA first, then the Intermediates.
</Steps>
</Tabs.Tab>
<Tabs.Tab>
<Steps>
### Download
Download the files using `curl`:
```bash
# Root CA
curl -LO https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt
# Intermediates
curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt
curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt
```
### Install (Debian/Ubuntu)
Copy all `.crt` files to the CA directory:
```bash
sudo cp *.crt /usr/local/share/ca-certificates/
```
### Update Store
Update the CA store:
```bash
sudo update-ca-certificates
```
*For RHEL/CentOS, copy to `/etc/pki/ca-trust/source/anchors/` and run `update-ca-trust`.*
</Steps>
</Tabs.Tab>
</Tabs>