Link to home
Start Free TrialLog in
Avatar of lianne143
lianne143Flag for United States of America

asked on

Spoof CA SSL intercept file for internet explorer is not getting installed for Windows 2012 servers from the GPO

Hi
We have Windows 2012 servers and Windows 7 workstations in our network.
Our internet is hosted by a company outside of our network and all our internet is traffic goes to a new filtering system which has been launched by them now.

We had in house proxy servers and the internet hosting company has asked me to shut down all of the proxy servers and install the Spoof CA SSL intercept file for internet explorer for every PCs on the network.

So I created a separate GPO and applied it on the domain level. The SSL intercept file gets installed to all the workstations from this GPO successfully and now the internet on all the workstations works without proxy server settings.

But this SSL certificate is not successfully getting installed only on the windows 2012 servers
The internet hosting company has given me PAC file URL and also the PAC file.
http://www.filter.pac

When I open google on any of these servers, it says there is a problem with this website's security certificate
Our AD structure: All the windows 2012 servers are located within the separate OU called Server OU.

I am not sure as why the windows 2012 servers are not installing the SSL file from the same GPO.
Please let me know how to sort this. Any help would be great.
SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of lianne143

ASKER

We have support contract  with this company  and our internet services for us  is looked after them for us and it is legitimate.
ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi David

Thank you so much for your post.
I added the SSL certificate to the Trusted Root Certification Authorities store locally to the windows 2012 server and now it works :)