Skip to content

Commit d8d564f

Browse files
authored
[ZT] macOS Big Sur or newer need to manually trust
It need to be fixed from Ventura to Big Sur because of this release. https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11_0_1-release-notes#Security >**Security** >**New Features** >- macOS Big Sur 11 beta improves system security by requiring an administrator password when a certificate trust settings change is made in the admin trust domain. Running as the root user alone is no longer sufficient to modify certificate trust. User trust domain settings continue to require confirmation by entering the password for the user’s account. This change may affect you if one of the following is true: > - You have written scripts which call /usr/bin/security add-trusted-cert -d ... as root. > - Your process runs as root and calls the SecTrustSettingsSetTrustSettings function to trust a certificate. Ref. [security add-trusted-cert asks pas… | Apple Developer Forums](https://forums.developer.apple.com/forums/thread/671582)
1 parent a782956 commit d8d564f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/automated-deployment.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ The certificate is required if you want to [apply HTTP policies to encrypted web
4040
3. Turn on [**Install CA to system certificate store**](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#install-ca-to-system-certificate-store).
4141
4. [Install](/cloudflare-one/connections/connect-devices/warp/download-warp/) the WARP client on the device.
4242
5. [Enroll the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) in your Zero Trust organization.
43-
6. (Optional) If the device is running macOS Ventura or newer, [manually trust the certificate](#manually-trust-the-certificate).
43+
6. (Optional) If the device is running macOS Big Sur or newer, [manually trust the certificate](#manually-trust-the-certificate).
4444

4545
WARP will install the [certificate set to **In-Use**](/cloudflare-one/connections/connect-devices/user-side-certificates/#certificate-status). This certificate can be either a [Cloudflare-generated certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) or a [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). If you turn on a new certificate for inspection, WARP will automatically install the new certificate and remove the old certificate from your users' devices.
4646

@@ -65,7 +65,7 @@ The WARP client will also place the certificate in `/Library/Application Support
6565

6666
#### Manually trust the certificate
6767

68-
macOS Ventura and newer do not allow WARP to automatically trust the certificate. To manually trust the certificate:
68+
macOS Big Sur and newer do not allow WARP to automatically trust the certificate. To manually trust the certificate:
6969

7070
1. In Keychain Access, [find and open the certificate](#macos).
7171
2. Open **Trust**.

0 commit comments

Comments
 (0)