Connect BYOD Devices - ChromeBook Certificate Install

Chrome Logo These instructions are for Chromebooks. There are separate instructions for Windows, Apple and Android devices.

On your Chromebook, you may be able to connect to KKHS_BYOD but find you are unable to browse to secure websites. You get "Your connection is not private" messages. Secure websites have addresses that begin with "https" and they show a padlock icon in your web browser's address bar once they've loaded. To resolve these problems you need to install the Kerikeri High School certificate onto your Chromebook.

1. Before you bring your Chromebook to school, ensure you have connected it to your home internet, set up a Google account and logged on to it. This will ensure that the Chromebook has been initialized with Google and updated to the latest version.

2. Start the Chromebook, click the wifi icon in the bottom-right by the clock and connect to KKHS_BYOD using "KeriHigh" as the password.

3. Log in using your Google account, and log in through the Fortinet.

4. Browse to www.kerikerihigh.ac.nz/kkhscert.cer to download the Kerikeri High School certificate to the Chromebook (this just stores it).

5. Go into Chrome's settings by clicking the 3-bar Menu icon in the top-right by the star icon, then selecting "Settings" from the menu.
Scroll down to the bottom of the list and select "Show Advanced Settings".

6. Scroll down to "HTTPS/SSL" and click the "Manage Certificates" button.

7. Select the "Authorities" tab (3rd one along), then click the "Import" button.

8. In the left-hand pane ensure "Downloads" is selected.
At the bottom change from "Base64-encoded ASCII single certificate" to "All files".

9. You should see kkhscert.cer in the right-hand pane. Select it and click "Open".

10. In the "Certificate Authority" popup box, tick all 3 boxes then click "OK".
In the certificate list you should now be able to scroll up the list and find "Fortinet, Fortigate CA".

11. Click "Finished" then close the Settings window.

12. Try going to a secure website, e.g. https://www.google.com
You should see the usual page instead of a "Your connection is not private" message.