Skip to content

Commit c5fb5ab

Browse files
committed
Add new details for WARP
1 parent bd8441d commit c5fb5ab

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/automated-deployment.mdx

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,19 +35,23 @@ The certificate is required if you want to [apply HTTP policies to encrypted web
3535

3636
## Install a certificate using WARP
3737

38+
To configure WARP to install a root certificate on your organization's devices:
39+
3840
1. (Optional) [Upload](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/) a custom root certificate to Cloudflare.
3941
2. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Settings** > **WARP Client**.
4042
3. Turn on [**Install CA to system certificate store**](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#install-ca-to-system-certificate-store).
4143
4. [Install](/cloudflare-one/connections/connect-devices/warp/download-warp/) the WARP client on the device.
4244
5. [Enroll the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) in your Zero Trust organization.
4345
6. (Optional) If the device is running macOS Big Sur or newer, [manually trust the certificate](#manually-trust-the-certificate).
4446

45-
WARP version 2024.12.554.0 and later will install all of your [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#certificate-status). These certificates can be either a [Cloudflare-generated certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) or a [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). It may take up to 24 hours for newly available certificates to download to your users' devices.
47+
WARP will download any [certificates set to **Available**](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate), then add the files to the `installed_certs/` directory and to the `installed_cert.pem` file in the device's system certificate store. These certificates can be either a [Cloudflare-generated certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) or a [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). It may take up to 24 hours for newly available certificates to download to your users' devices.
48+
49+
Cloudflare recommends you set any scripts using the `installed_cert.pem` to use the `installed_certs/` directory instead. `installed_certs.pem` will be removed by 31-06-2025.
4650

47-
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove old certificates from your users' devices.
51+
WARP only installs certificates to the system certificate -- it does not install the certificate to individual applications. You will need to [manually add the certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store.
4852

49-
:::note[Important]
50-
WARP only installs the system certificate -- it does not install the certificate to individual applications. You will need to [manually add the certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment/#add-the-certificate-to-applications) to applications that rely on their own certificate store.
53+
:::caution[Out of date certificates]
54+
WARP versions prior to 2024.12.554.0 will only install the certificate set to **In-Use** and automatically remove old certificates from your users' devices. To ensure your users' devices have the most up-to-date certificates installed, [update WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/update-warp/#how-to-update-warp).
5155
:::
5256

5357
## Access the installed certificate

0 commit comments

Comments
 (0)