Zscaler Security Certificate

Zscaler Root Security Certificate Installation

Buncombe County Schools uses Zscaler for Internet content filtering. In order to access secure "https://" sites a current Zscaler Root Security Certificate must be installed on the device. District owned Windows machines receive Zscaler Root Security Certificate pushes automatically. Users may be required to authenticate to the content filter system to gain access to certain sites based on age appropriateness. Visitors may obtain the guest username and password from school staff.

Personally Owned Devices (BYOD), & iPads, Macs, Androids, Chromebooks

Users will be required to download and install the Zscaler root security certificate on personally owned devices in order to access "https://" sites.  This certificate is installed so that your internet traffic can be securely transmitted.  No data is collected from your computer, and no software or off-site monitoring capabilities are ever installed on personally owned devices.

Please refer to the installation instructions below for your device type. You will likely need to restart the browser after you install the certificate.

Download SHA-256 Z-Scaler Root Certificate - Effective April 10, 2015

Notes:

  • If you are using Chrome Browser and you are logged into Chrome when you install the certificate log out and back into Chrome.

  • On Android Smartphones installing the Z-Scaler Root Security Certificate will force you to use the lock screen feature to access your device. After installing the cert you will be prompted to name the certificate (e.g. "Zscaler2048)  and then be sure to choose "VPN and apps" rather than "Wi-Fi" so that it applies to the Chrome app.

  • On a Mac the certificate(s) must be installed into the "System" location in Keychain. (It defaults to "Login" location.) See instructions below. After installing in the correct location, you will also need to double click the certificate and choose "Always Trust". If you visit a site like cnn.com before taking the final step to "Trust" the certificate you will be prompted with an invalid certificate warning and can "Show Certificate" and then click on the top level "Zscaler certificate" and then check the "Always Trust" checkbox which will resolve the issue.

Below are the instructions for manually installing the Z-Scaler Certificates to various operating system platforms and web browsers.

Windows OS, using Internet Explorer web browser: or
Windows 10, using Edge top right click more actions, open with Internet Explorer:  

  1. Download the ZScaler Certificate and save to your location choice (desktop, flash drive, etc).

  2. Open Internet Explorer. From Internet Explorer, go to the Tools menu, select Internet Options, and then in the window that appears switch to the Content tab and click the "Certificates" button.

  3. To install the certificate go to the Trusted Root Certification Authorities tab and click the "Import..." button. In the Certificate Import Wizard window that appears click the "Next button.

  4. To select the file, press the "Browse..." button. Find the saved certificate file (desktop, flash drive, etc.) and click the "Open" button..."Next", "Finish".

  5. Close and restart the Web browser. 

Google Chrome Web Browser Users: The Chrome web browser pulls its certificate configuration from Internet Explorer, therefore no further action is required. Once the Certificate is installed successfully to Internet Explorer, Google Chrome will also work with the Z-Scaler Content Filter. You will need to close and restart the Chrome Browser if you have it open when you install the certificate in Internet Explorer.

Firefox Web Browser Users:

  1. Shortcut: Double click the link above using Firefox.  

  2. Check all three checkboxes. Click "OK". Done! 

  3. Download the ZScaler Certificate (ZscalerRootCertificate-2048.crt) and save to your location choice (desktop, flash drive, etc).

  4. Open Firefox.

  5. From Firefox, go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab and click the "Certificates" tab.

  6. Select "View Certificates" and then "Authorities" and then click the "Import..." button.

  7. In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.

  8. When you find the saved certificate file (ZscalerRootCertificate-2048.crt) click the "Open" button...

  9. "Check all three boxes", Click "OK". Done!

Mac OS X (MacBook Pro, MacBook Air, iMac, Mac mini, etc.):

  1. Download Z-Scaler Certificate. 

  2. Double-Click files and depending on your version of OS X, the "Keychain" window will open, where you will install the Z-Scaler Certificates. 

  3. "Add Certificates" window, select "System", under "Keychain"....click "Add".

  4. Enter your device password.

  5. Now double click the certificate and choose "Always Trust".

  6. Enter your device password.

iOS (iPad, iPod, iPhone):

You will need to perform these tasks through the Safari mobile web browser. Note: The "Chrome App" for iOS is not currently compatible. Please use the "Gmail, Drive, etc." apps from the AppStore instead.

  1. Click the link to download the file.

  2. Click "Install". Zscaler certificates are not in the Apple trusted certificates list. Simply ignore the warnings.

  3. Click "Install". Zscaler certificates are not in the Apple trusted certificates list. Simply Ignore the warnings.

  4. If you have a passcode on your iPad, you will need to enter it when prompted.

Very Important: Once installed (green verified checkmark) you will need to go to Settings > General > About > Certificate Trust Settings and enable Zscaler Root CA and click "Continue" on the warning.

Firefox Web Browser for Mac:     

  1. Shortcut: Double click the link above using Firefox.  Check all three checkboxes. Click "OK". Done!

Alternatively:

  1. Download the ZScaler Certificate (ZscalerRootCertificate-2048.crt) and save to your location choice (desktop, flash drive, etc).
    Open Firefox.

  2. From Firefox, go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab and click the "Certificates" tab.

  3. Select "View Certificates" and then "Authorities" and then click the "Import..." button.

  4. In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.

  5. When you find the saved certificate file (ZscalerRootCertificate-2048.crt) click the "Open" button..."Check all three boxes", Click "OK". Done! 

Android:

  1. Click the link above to download the Z-Scaler certificate.

  2. Android will ask you to name the certificate.  Provide a name for the certificate (example: Zscaler2048)

  3. The certificate will be installed, and you will be asked if it applies to "VPN and apps" or "WiFi".

  4. Choose "VPN and apps"

Note: you will be forced to use the lock screen feature of your Android device when you install this certificate. This is a function of how Android is designed. 

Chromebook:

  1. Download the Z-Scaler certificate to USB flash drive or it will

    • automatically save to the downloads folder on the Chromebook.

  2. Open Settings from the Chromebook browser’s menu.

  3. Select Show advanced settings.

  4. Find HTTPS/SSL and click Manage certificates.

  5. Select Authorities.

  6. Scroll down and click Import.

  7. Choose the certificate from the location that it was saved to and click Open.

  8. Select “Trust this certificate for identifying websites.

  9. Click OK to finish the process.

  10. Close all dialogue boxes.

**Certificates are user specific on Chromebooks, not device specific.