Installing and Managing Certificates on zTC

Prerequisites

• SnapOS ≥1.3
• Certificate files in .cer, .der, .crt, .p12, .p7b, or .pem format
• USB drive or FTP server access (for remote install)

Procedure

1. Start → Applications → Certificate Install
   
2. Add from USB
   
   • Click “+” → Browse from this Device → select file → Install → Close
3. Add from FTP
   • Click “+” → choose FTP → enter server, path, creds → Install → Close
4. Delete
   • Select certificate → click trash icon → confirm

Example

To trust a private RDP host cert: copy hostcert.pem to USB → insert → add via Certificate Installer

Advanced Configuration

• Automate via zMAN: push cert bundles and auto-install on registration.

Related Features

• Microsoft Remote Session article (for trusting RDP hosts)
• Citrix Remote Session article (for storefront certs)

Troubleshooting

• Install fails (“unsupported format”): convert .p12 to .pem with OpenSSL:

  openssl pkcs12 -in cert.p12 -out cert.pem -nodes

• Cert not listed after reboot: ensure it was installed under /etc/ssl/certs/.

FAQs

Can I install multiple certs at once?

Yes—add them one by one; they’ll all appear in the list.

How do I export a cert to remove it centrally?

Delete in UI, or remove its file under /etc/ssl/certs/ via SSH.