Skip to content

Commit 6b4cfdd

Browse files
committed
Fix wording for install locations
1 parent c5fb5ab commit 6b4cfdd

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/automated-deployment.mdx

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,10 @@ The certificate is required if you want to [apply HTTP policies to encrypted web
3535

3636
## Install a certificate using WARP
3737

38+
:::caution[Out of date certificates]
39+
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove any other WARP-installed certificates from your users' devices. To ensure your users' devices have all of your available certificates installed, [update WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/update-warp/#how-to-update-warp).
40+
:::
41+
3842
To configure WARP to install a root certificate on your organization's devices:
3943

4044
1. (Optional) [Upload](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/) a custom root certificate to Cloudflare.
@@ -44,15 +48,11 @@ To configure WARP to install a root certificate on your organization's devices:
4448
5. [Enroll the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) in your Zero Trust organization.
4549
6. (Optional) If the device is running macOS Big Sur or newer, [manually trust the certificate](#manually-trust-the-certificate).
4650

47-
WARP will download any [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate), then add the files to the `installed_certs/` directory and to the `installed_cert.pem` file in the device's system certificate store. These certificates can be either a [Cloudflare-generated certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) or a [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). It may take up to 24 hours for newly available certificates to download to your users' devices.
51+
WARP will now download any [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate). It may take up to 24 hours for newly available certificates to download to your users' devices.
4852

49-
Cloudflare recommends you set any scripts using the `installed_cert.pem` to use the `installed_certs/` directory instead. `installed_certs.pem` will be removed by 31-06-2025.
53+
After download, WARP will add the certificates to the device's system certificate store in `installed_certs/<certificate_id>.pem` and append the contents to the `installed_cert.pem` file. If you have any scripts using `installed_cert.pem`, Cloudflare recommends you set them to use the `installed_certs/` directory instead. `installed_certs.pem` will be deprecated by 2025-06-31.
5054

51-
WARP only installs certificates to the system certificate -- it does not install the certificate to individual applications. You will need to [manually add the certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store.
52-
53-
:::caution[Out of date certificates]
54-
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove old certificates from your users' devices. To ensure your users' devices have the most up-to-date certificates installed, [update WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/update-warp/#how-to-update-warp).
55-
:::
55+
WARP does not install certificates to individual applications. You will need to [manually add certificates](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store instead of the system certificate store.
5656

5757
## Access the installed certificate
5858

0 commit comments

Comments
 (0)