Zscaler Security Certificate

Zscaler Security Certificate Installation

Buncombe County Schools (BCS) uses Zscaler for Internet content filtering. In order to access secure "https" sites a current Zscaler Security Certificate must be installed on device browsers. BCS owned Windows devices receive the Zscaler Security Certificate automatically. All users may be required to authenticate to the Zscaler content filter system to gain access to certain sites based on age appropriateness.

Personally Owned Devices (BYOD), & iPads, Macs, Androids, Chromebooks

Users will be required to download and install the Zscaler security certificate on personally owned devices in order to access "https" websites. This certificate is installed so that your Internet traffic can be securely transmitted.  No data is collected from your device and no software or off-site monitoring applications are ever installed on personally owned devices.

Please refer to the installation instructions below for your device type. Best practice is to restart the browser after you install the certificate.

Download SHA-256 Zscaler Root Certificate

Below are the instructions for manually installing the Zscaler Certificate to various operating system platforms and web browsers.

Windows OS, using Internet Explorer web browser:

  1. Download the Zscaler Certificate and save to your location choice (desktop, flash drive, etc).

  2. Open Internet Explorer. From Internet Explorer, go to the Tools menu, select Internet Options, and then in the window that appears switch to the Content tab and click the "Certificates" button.

  3. To install the certificate go to the Trusted Root Certification Authorities tab and click the "Import..." button. In the Certificate Import Wizard window that appears click the "Next button.

  4. To select the file, press the "Browse..." button. Find the saved certificate file (desktop, flash drive, etc.) and click the "Open" button..."Next", "Finish".

  5. Close and restart the Web browser. 

Windows OS, using Edge web browser:

  1. Download the Zscaler Certificate and save to your location choice (downloads, desktop, flash drive, etc).

  2. Open Microsoft Edge, top right corner, click on the 3 dots and choose settings.

  3. In the search box in settings, type Certificates and choose Manage Certificates.

  4. To install the certificate go to the Trusted Root Certification Authorities tab (4th tab) and click the "Import..." button. Then in the Certificate Import Wizard window that appears click the "Next" button.

  5. To select the file, press the "Browse..." button. Find the saved certificate file (downloads, desktop, flash drive, etc.) and click the "Open" button..."Next", "Finish".

  6. Close and restart the Web browser.

  7. If you are normally a Google Chrome user, you will also need to close and restart that browser, the certificate will auto import from Edge to Chrome

Google Chrome Web Browser Users: 

The Chrome web browser pulls the Zscaler certificate configuration from Internet Explorer or Edge, therefore no further action is required. Once the Certificate is installed successfully to Internet Explorer or Edge, Google Chrome will also work with the Zscaler Content Filter. You will need to close and restart the Chrome Browser if you have it open when you install the certificate in Internet Explorer or Edge.

Firefox Web Browser Users:

  1. Shortcut: Double click the link above using Firefox.  

  2. Check all three checkboxes. Click "OK". Done! 

  3. Download the Zscaler Certificate and save to your location choice (desktop, flash drive, etc).

  4. Open Firefox.

  5. From Firefox, go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab and click the "Certificates" tab.

  6. Select "View Certificates" and then "Authorities" and then click the "Import..." button.

  7. In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.

  8. When you find the saved Zscaler certificate file click the "Open" button...

  9. "Check all three boxes", Click "OK". Done!

Mac OS X (MacBook Pro, MacBook Air, iMac, Mac mini, etc.):

  1. Download Zscaler Certificate. 

  2. Double-Click files and depending on your version of OS X, the "Keychain" window will open, where you will install the Zscaler Certificates. 

  3. "Add Certificates" window, select "System", under "Keychain"....click "Add".

  4. Enter your device password.

  5. Now double click the certificate and choose "Always Trust".

  6. Enter your device password.

iOS (iPad, iPod, iPhone):

You will need to perform these tasks through the Safari mobile web browser. Note: The "Chrome App" for iOS is not currently compatible. Please use the "Gmail, Drive, etc." apps from the AppStore instead.

  1. Click the link to download the file.

  2. Click "Install". Zscaler certificates are not in the Apple trusted certificates list. Simply ignore the warnings.

  3. If you have a passcode on your iPad, you will need to enter it when prompted.

Very Important: Once installed (green verified checkmark) you will need to go to Settings > General > About > Certificate Trust Settings and enable Zscaler Root CA and click "Continue" on the warning.

Firefox Web Browser for Mac:     

  1. Shortcut: Double click the link above using Firefox.  Check all three checkboxes. Click "OK". Done!

Alternatively:

  1. Download the Zscaler Certificate and save to your location choice (desktop, flash drive, etc).
    Open Firefox.

  2. From Firefox, go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab and click the "Certificates" tab.

  3. Select "View Certificates" and then "Authorities" and then click the "Import..." button.

  4. In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.

  5. When you find the saved Zscaler certificate file click the "Open" button..."Check all three boxes", Click "OK". Done! 

Android:

  1. Click the link above to download the Zscaler certificate. The certificate will say it cannot be installed.

  2. Open settings and search CA Certificate.

  3. Click on CA Certificate then click on Install Anyway.

  4. Verify Your identity if you have a passcode on your phone.

  5. Choose the sha-root certificate from your downloads.

  6. Go to ford.com and the browser will prompt you to sign in to Zscaler

Note: you will be forced to use the lock screen feature of your Android device when you install this certificate. This is a function of how Android is designed. 

Chromebook**:

  1. Download the Zscaler certificate to USB flash drive or it will

    • automatically save to the downloads folder on the Chromebook.

  2. Open Settings from the Chromebook browser’s menu.

  3. Select Show advanced settings.

  4. Find HTTPS/SSL and click Manage certificates.

  5. Select Authorities.

  6. Scroll down and click Import.

  7. Choose the certificate from the location that it was saved to and click Open.

  8. Select “Trust this certificate for identifying websites.

  9. Click OK to finish the process.

  10. Close all dialogue boxes.

**Certificates are user specific on Chromebooks, not device specific.

Updated July 2023