Skip to content

Commit bf944c2

Browse files
committed
Update issuer CA name to match new template
1 parent b096441 commit bf944c2

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

tutorials/browser-certificate-setup-guide.mdx

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Configure Web Browser Certificates
3-
updated_at: April 08, 2025
3+
updated_at: April 09, 2025
44
html_title: Configure your web browsers to use Smallstep hardware-bound device identtiy certificates.
55
description: This tutorial describes how to set up web browsers to access resources using mutual TLS and Smallstep certificates.
66
---
@@ -113,7 +113,7 @@ when a protected resource is accessed.
113113
<key>ISSUER</key>
114114
<dict>
115115
<key>CN</key>
116-
<string>Smallstep Accounts Intermediate CA</string>
116+
<string>Smallstep [Team Slug] Accounts Intermediate CA</string>
117117
</dict>
118118
</dict>
119119
</dict>
@@ -123,6 +123,7 @@ when a protected resource is accessed.
123123
```
124124

125125
Replace `[Server URL]` with the server that requires certificate authentication.
126+
Replace `[Team Slug]` with your Smallstep team slug.
126127
This field is an [Enterprise policy URL pattern](https://chromeenterprise.google/policies/url-patterns/).
127128

128129
Note: According to [Understand Chrome policy management](https://support.google.com/chrome/a/answer/9037717),
@@ -151,7 +152,7 @@ To test the certificate, restart the browser and visit one your target URLs.
151152

152153
1. Confirm that a client certificate has been issued, run `certmgr` from PowerShell.
153154
Look inside Certificates - Current User → Personal → Certificates.
154-
You should see a certificate issued by `Smallstep Accounts Intermediate CA`.
155+
You should see a certificate issued by a Smallstep Accounts Intermediate CA.
155156

156157
2. Confirm your client certificate is visible in your browser. If not, restart the browser.
157158

@@ -168,7 +169,7 @@ For Chrome and Edge, we can use the [`AutoSelectCertificateForUrls`](https://chr
168169
- If the key you're looking for doesn't exist, you may need to create the `Google` and `Google/Chrome` keys or the `Edge` key.
169170

170171
3. In the registry path for your browser, create a new String Value named `AutoSelectCertificateForUrls`
171-
4. Set the value to `["{\"pattern\":\"$URL\",\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep Accounts Intermediate CA\"}}}"]`, substituting `$URL` for the URL you want to use with the Smallstep client certificate.
172+
4. Set the value to `["{\"pattern\":\"$URL\",\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep $TEAM Accounts Intermediate CA\"}}}"]`, substituting `$URL` for the URL you want to use with the Smallstep client certificate, and `$TEAM` for your Smallstep team slug.
172173
5. Restart the browser.
173174
6. Confirm the policy change.
174175

@@ -190,16 +191,17 @@ We can use the [AutoSelectCertificateForUrls](https://chromeenterprise.google/po
190191

191192
```
192193
{
193-
"AutoSelectCertificateForUrls": ["{\"pattern\":${url},\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep Accounts Intermediate CA\"}}}"]
194+
"AutoSelectCertificateForUrls": ["{\"pattern\":\"$URL\",\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep $TEAM Accounts Intermediate CA\"}}}"]
194195
}
195196
```
196197

197-
Replace `${url}` with the server that requires certificate authentication.
198+
Replace `$URL` with the server that requires certificate authentication.
199+
Replace `$TEAM` with your Smallstep team slug.
198200
For example:
199201

200202
```json
201203
{
202-
"AutoSelectCertificateForUrls": ["{\"pattern\":\"https://example.id.smallstep.com\",\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep Accounts Intermediate CA\"}}}"]
204+
"AutoSelectCertificateForUrls": ["{\"pattern\":\"https://example.id.smallstep.com\",\"filter\":{\"ISSUER\":{\"CN\":\"Smallstep example Accounts Intermediate CA\"}}}"]
203205
}
204206
```
205207

0 commit comments

Comments
 (0)