How to import the SonicWall DPI-SSL CA certificate into the Windows Certificate store?

Before Client DPI-SSL is enabled, the SonicWall Client DPI-SSL CA certificate must be trusted by web applications like browsers. In Windows, this is done by importing the certificate into the Windows Certificate Store, because most browsers and other applications use the Windows Certificate store.

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Download the SonicWall Client DPI-SSL CA certificate from the Client DPI-SSL page.

1. Login to the firewall.
2. Navigate to POLICY | DPI-SSL | Client SSL.
   
   
3. Click Certificate tab.
   
   
4. Click the drop down menu and select the certificate that will be used for DPI-SSL and then click download.
   
   

Open Microsoft Management Console by typing MMC in Run.

1. Click on File and select Add/Remove Snap-in.
2. Click on Certificates and click Add.
3. Select Local Machine store.
4. Select Computer Account and click Next.
5. Click Finish.
6. Click OK.
7. Right-click on Trusted Root CA Certificates folder.
8. Click on All Tasks and click on Import.
9. Click Next and browse to the location where the SonicWall DPI-SSL certificate is saved.
10. Select the certificate and click Open.
11. Click on Next and then Finish.
12. Close the console. 
    
    
    
    

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Download the SonicWall Client DPI-SSL CA certificate from the Client DPI-SSL page.

1. Login to the firewall.
2. Navigate to MANAGE | Decryption Services | DPI-SSL/TLS Client.
   
   
   
3. Click Certificate tab.
   
   
   
4. Click the drop down menu and select the certificate that will be used for DPI-SSL and then click download.
   

Open Microsoft Management Console by typing MMC in Run.

1. Click on File and select Add/Remove Snap-in.
2. Click on Certificates and click Add.
3. Select Local Machine store.
4. Select Computer Account and click Next.
5. Click Finish.
6. Click OK.
7. Right-click on Trusted Root CA Certificates folder.
8. Click on All Tasks and click on Import.
9. Click Next and browse to the location where the SonicWall DPI-SSL certificate is saved.
10. Select the certificate and click Open.
11. Click on Next and then Finish.
12. Close the console.