Deploying a MITM certificate to Windows devices with Google Endpoint Security

[ThatBoringBloke]

Hi all,

 

Documentation is light on the ground on this one so I'm reaching out...

 

Our school is predominantly a Google school.

We still have onsite AD and Windows for staff and some IT suites.

Some of our SLT have Windows devices that are configured as standalone devices using GCPW for authentication and are mostly used offsite.

When these devices come onsite I have to manually install our Smoothwall MITM certificate on the devices so that they can access the web.

 

Does anyone know how I can push the certificate to these endpoints from within Google Admin? Presumably from somewhere within the custom Windows settings for devices?

[Joeloman]

With Google admin you don't have much control over the Windows computers other than updates, and the same password etc.

What I know.

You can also make settings in the Chrome browser including installing certificates.

If I remember correctly, they are only located locally in the Chrome browser.

That is, it doesn't work with Edge or other programs.

 

My advice is to also get Smoothwall Cloud Filter (if you don't already have it) and then install Unified Client on these Windows computers.

Then they are protected even outside of school and you don't have to deal with certificates.

 

There will be a new Unified Client coming soon that is more secure when it comes to apps etc., ask support about it.

Edited February 11, 2025 by Joeloman