Certificate Authority Distribution
Scan with your phone's camera to visit this page
SSL certificates generated for services on your network
{{CERT_FINGERPRINT}}
Compare this fingerprint against the one your device displays during install — they must match exactly. If "{{CERT_FINGERPRINT}}" is still showing, the page hasn't been templated from cert-info.json; use the fingerprint in the Certificate Information card above instead.
Right-click the Start button and select "Windows PowerShell (Admin)" or "Terminal (Admin)"
Copy and paste this command into PowerShell:
Visit any service on your private network domain — you should see a secure connection with no warnings.
Click "Apple Profile" above to download root.mobileconfig
Open System Settings → Privacy & Security → Profiles. Click the downloaded profile and click "Install".
Open Terminal and run:
Open your terminal application (usually Ctrl+Alt+T)
Copy and paste this command (will prompt for sudo password):
The installer supports Debian/Ubuntu, RedHat/CentOS/Fedora, and Arch Linux. It will automatically detect your distribution and use the appropriate commands.
Use your iPhone's camera to scan the QR code above, or visit this page in Safari (the address is shown in the QR section).
Tap "Apple Profile" to download root.mobileconfig. You'll see a notification that the profile was downloaded.
Go to Settings (you should see a notification), tap on the downloaded profile, and tap "Install". Enter your passcode if prompted.
Installing the profile is not enough. Go to Settings → General → About → Certificate Trust Settings, find your CA under "Enable Full Trust For Root Certificates", and toggle it on. Safari will not trust the CA until this second step is done.
Before installing, compare the SHA-256 fingerprint shown in the "Certificate Information" card at the top of this page against what your device shows during profile install — they must match exactly.
Tap "Root Certificate (.crt)" above to download the certificate to your device
Open Settings → Security → Encryption & credentials → Install a certificate → CA certificate. Select the downloaded file.
Android installs this as a user certificate. Browsers (Chrome, Firefox) will trust it for HTTPS — but most native apps ignore user CAs for security reasons, so they will keep showing certificate errors. There is no fix without installing the CA at the system level, which requires a rooted device. Plan browsers-first on Android.