You use this method if N-Central is not letting you push the update and shows "Failed' or "Completed with error"
2. File transfer the highlighted file "New_HQ Cert" to the user via N-Central
4. Remote into the user's device and save the file to somewhere accessible (Desktop, Documents, etc.)
- IF THE USER IS REMOTE, SKIP TO THE BOTTOM OF THIS DOCUMENT AND FOLLOW "REMOTE USER STEP" AFTER THIS STEP
5. In the windows search bar type "Cert" and select Manage Computer Certificates
6. Expand Trusted Root Certificate
- Click on Certificates
- Right Click Certificates, All Tasks, click Import
- Click Next, then browse for the certificate, and follow the prompts
- Click on the cert FG6H1ETB21904530
- If the Serial number shows that it ends in 339 then you're good to go, reboot device and everything should be fixed
Remote User Step
- After step 4, if the user is remote and they are on VPN, double click the cert and follow the screenshot below
- After you click Install Certificate, Select LOCAL MACHINE and then hit Next
- After this, if they are on VPN, use your admin credentials and login
- Then clear cache on browsers and restart device
- If it doesn't work this way and you can't see the FG6H cert, follow the even more manual step below
IF THE ABOVE DOESN'T WORK FOR REMOTE USERS, DROP IN THE FILE IN THE THIRD PARTY FOLDER MANUALLY, FOLLOW THE STEPS BELOW
- Use the other option that isn't Auto
- Click Browse
- Check "Show physical stores"
- Go to Third party and drop the cert there
- After successful import, restart device
Place in all the locations below if it doesn't stick after reboot
HQ Cert:
Current User > Place all certs in the following store > Show Physical Stores > Trusted Root > Registry
Local Machine > Place all certs in the following store > Show Physical Stores > Trusted Root > Registry
Local Machine > Place all certs in the following store > Show Physical Stores > Trusted Root > Third-Party