How to import the DPI-SSL client certificate under MacOS

03/26/2020 92 12962

DESCRIPTION:

After enabling client DPI-SSL on the SonicWall it is necessary to install the DPI-SSL client certificate on all Macs to avoid the security error presented by installed applications.

RESOLUTION:

In order to download and install the certificate, follow these steps:

1. Login to the SonicWall
2. Go to DPI-SSL | Client SSL
3. Open the Certificate tab (on older firmware this step is not necessary)
4. Click on the download link to the right of the selected certificate and save the certificate to the device
5. Now open the Keychain Access application on the Mac (Found under Applications | Utilities, alternatively search via Spotlight)
6. In the Keychain Access window, click on the System Keychain in the keychain list (top left)
7. At the bottom of the window, click on the + button
8. Select the certificate downloaded in step 4 and click open to import it
9. Select the newly imported certificate (SonicWALL Firewall DPI-SSL) and click on the "i" button
10. In the information window, expand the Trust section by clicking on the triangle icon to the left of Trust
11. Switch Secure Sockets Layer (SSL) to Always Trust
12. Close the information window to save the changes

NOTE: Firefox has it's own certificate store. If firefox is being used, please import the certificate into Firefox as well according to this knowledge base article How to manually import the Client DPI-SSL CA certificate into Firefox browser