Install the root certificate on Windows devices

You must install the DNS Protection root certificate on users' devices to ensure they can see block pages.

To install the root certificate on Windows devices, do as follows:

1. In Sophos Central, go to My Products > DNS Protection > Installers.
2. Under Configure block pages, click Certificate to download the root certificate.

3. Install the root certificate on users' devices. You can use one of the following options:

   • Install the root certificate remotely on multiple devices using Active Directory Group Policy. See Deploy Certificates by Using Group Policy.
   • Install the root certificate on each Windows device individually. See Installing the trusted root certificate.

   If you're using Firefox, add the certificate as a trusted root certificate or authority. See Setting Up Certificate Authorities (CAs) in Firefox.

4. Add certificate snap-ins. See Adding certificate snap-ins.