You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/automated-deployment.mdx
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,6 +35,10 @@ The certificate is required if you want to [apply HTTP policies to encrypted web
35
35
36
36
## Install a certificate using WARP
37
37
38
+
:::caution[Out of date certificates]
39
+
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove any other WARP-installed certificates from your users' devices. To ensure your users' devices have all of your available certificates installed, [update WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/update-warp/#how-to-update-warp).
40
+
:::
41
+
38
42
To configure WARP to install a root certificate on your organization's devices:
39
43
40
44
1. (Optional) [Upload](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/) a custom root certificate to Cloudflare.
@@ -44,15 +48,11 @@ To configure WARP to install a root certificate on your organization's devices:
44
48
5.[Enroll the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) in your Zero Trust organization.
45
49
6. (Optional) If the device is running macOS Big Sur or newer, [manually trust the certificate](#manually-trust-the-certificate).
46
50
47
-
WARP will download any [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate), then add the files to the `installed_certs/` directory and to the `installed_cert.pem` file in the device's system certificate store. These certificates can be either a [Cloudflare-generated certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) or a [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). It may take up to 24 hours for newly available certificates to download to your users' devices.
51
+
WARP will now download any [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate). It may take up to 24 hours for newly available certificates to download to your users' devices.
48
52
49
-
Cloudflare recommends you set any scripts using the `installed_cert.pem`to use the `installed_certs/` directory instead. `installed_certs.pem` will be removed by 31-06-2025.
53
+
After download, WARP will add the certificates to the device's system certificate store in `installed_certs/<certificate_id>.pem` and append the contents to the `installed_cert.pem` file. If you have any scripts using `installed_cert.pem`, Cloudflare recommends you set them to use the `installed_certs/` directory instead. `installed_certs.pem` will be deprecated by 2025-06-31.
50
54
51
-
WARP only installs certificates to the system certificate -- it does not install the certificate to individual applications. You will need to [manually add the certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store.
52
-
53
-
:::caution[Out of date certificates]
54
-
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove old certificates from your users' devices. To ensure your users' devices have the most up-to-date certificates installed, [update WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/update-warp/#how-to-update-warp).
55
-
:::
55
+
WARP does not install certificates to individual applications. You will need to [manually add certificates](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store instead of the system certificate store.
0 commit comments