Computer Setup

MacOS

  1. Visit your Embassy at its Tor Address.

  2. Navigate to –> Embassy –> Connect Over LAN

    LAN setup menu item

    Select the “Connect over LAN” menu item

  3. Select the “Root Certificate Authority” sub menu. This will prompt a download to save the certificate file to your machine.

    LAN setup page

    Select the “Root Certificate Authority” sub menu

  4. Select the option to open your key with Keychain Access. If you choose to save file, double click on it once downloaded.

    LAN setup prompt

    Open with “Keychain Access” and select “OK”

  5. Enter your computer password when prompted. It will be imported into your computer’s keychain.

    Keychain access import menu

    Keychain access import menu

  6. If the keychain console did not open, press “Command + spacebar” and type “Keychain Access”, and hit enter to open it.

  7. Navigate to the “System” tab and find the certificate entitled “Embassy Local Root CA”.

  8. Double click on this certificate. A second window will pop up.

  9. Open the “Trust” dropdown and select “Always Trust” from the dropdown next to “when using this certificate”.

    Keychain submenu

    Select “Always trust” under SSL dropdown for Embassy Local CA

  10. Close this window and enter your password to apply the settings.

  11. The “Embassy Local Root CA” cert will now read “This certificate is marked as trusted for all users” in Keychain Access.

    Keychain menu trusted certificate

    Trusted Embassy Local CA certificate

  12. Open your favorite browser to import this certificate and follow the steps for browser setup.

Windows

  1. Install Bonjour Print Services on your Windows machine. This is necessary in order to visit .local addresses on Windows.

  2. If you are having issues running Bonjour after installing, you might have had Bonjour previously installed. To fix:

    1. Check out this video: https://www.youtube.com/watch?v=9ECCB3bqNDQ

    2. Uninstall Bonjour completely via system settings -> remove programs

    3. Reinstall Bonjour Printer Driver package (download at https://support.apple.com/kb/DL999?locale=en_US)

    4. Restart Windows

    5. Note: Uninstalling Bonjour via the setup package seems to be not enough to solve the issue. Bonjour must be uninstalled via windows system settings.

  3. Visit your Embassy at its Tor Address.

  4. Navigate to –> Embassy –> Connect Over LAN

    LAN setup menu item

    Select the “Connect over LAN” menu item

  5. Select the “Root Certificate Authority” sub menu. This will prompt a download to save the certificate file to your machine.

    LAN setup page

    Select the “Root Certificate Authority” sub menu download icon

  6. Select the option to save the Embassy Local CA.crt file.

    LAN setup prompt

    “Save file” when Opening Embassy Local CA.crt

  7. On your computer, right-click the “Start” menu and select “Run”.

  8. Type in “mmc” and click “OK”. When prompted on the “User Account Control” window, select “Yes” to allow this program to run.

    Windows MMC

    Access the Windows Management Console

  9. When the Management Console opens, navigate to File > Add/Remove Snap-in.

    Windows Console Root

    Add Snap-in from Console Root

  10. Select “Certificates” in the left side menu, then “Add”. This will open another window.

    Add Certificates

    Add Certificates to selected snap-ins

  11. Select “Computer account” and click “Next. Leave defaulted options on the next screen and click “Finish”.

  12. When you return to the “Add or Remove Snap-ins” page, ensure “Certificates (Local Computer)” exists under “Console Root” in the “Selected snap-ins” section, then click “OK”.

    Snap-in Selected

    Certificates (Local Computer) is selected as snap-in

  13. In the left hand menu of the Management Console, navigate to Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates.

    Certificates in Management Console

    Access Certificates in Management Console

  14. Right click on “Certificates”, then navigate to All Tasks > Import.

    Import certificate

    Select “Import” from Certificates sub-menu

  15. Click “Next” on the first page of the Certificate Import Wizard, then browse to the location where you saved the downloaded certificate and click “Open”.

    Import cert wizard

    Add downloaded certificate int he Certificate Import Wizard

  16. On the “Certificate Store” window, ensure that it says “Trusted Root Certificate Authorities” and click “Next”.

  17. Select “OK” when the import is successful.

  18. Verify the Embassy Local Root CA certificate is in the “Certificates” folder.

    Successful cert install

    Embassy Local Root CA imported into Certificate folder

  19. You can save the settings to the console if desired or cancel.

  20. Open your favorite browser to import this certificate and follow the steps for browser setup.

Linux

Nothing specific needs to be configured for this environment, so you just need the certificate from your Embassy.

  1. Visit your Embassy at its Tor Address.

  2. Navigate to –> Embassy –> Connect Over LAN

    LAN setup menu item

    Select the “Connect over LAN” menu item

  3. Select the “Root Certificate Authority” sub menu. This will prompt a download to save the certificate file to your machine.

    LAN setup page

    Select the “Root Certificate Authority” sub menu

Then open your favorite browser to import this certificate and follow the steps for browser setup.