Web browsing certificate - TLS deciphering

This isnt really a Watchguard issue specifically, but I am wondering if anyone else has seen this.

We installed a new T45. We have TSS and HTTPS TLS deciphering turned on. Its in a small office with no domain. We have one machine, a current Win11 Home Surface, that will not use the certificate. We import it and we get a message that it was successfully imported. But the browser still prompts and checking the certificate manager, it doesnt show up at all. The other machines in the office import and are working fine. For now, I had to turn off the feature because of this one user.

I'm hoping someone has seen this and has an idea. TIA!

Comments

  • FYI, you can have a separate policy for this 1 machine.
    Create a DHCP reservation for the MAC addr of the Surface, and use the IP addr of it in the HTTPS policy for it.

    Then all of the other PCs can use the original policy.

    Is the Surface using Edge as the web browser?

  • I have tested with Edge and Chrome. Avoided FF on purpose.
    Thats a creative workaround and I may do that. But it would be great to solve the issue :wink:

  • A quick Internet search didn't show anything obvious for a Surface.
    Good luck.

Sign In to comment.