Decrypt & Scan HTTPS

Question

Hello all, 
 I've been messing around with the certificate distribution using GPO. 
 After create the default domain policy, adding the cert and force the gpo update I got the cert installed on my browsers (Firefox and Chrome) but I'm still getting the ERR-CERT_AUTHORITY_INVALID error. 
 I tried installing the cert manually on my pc and it works fine. Sadly, it's not possible for me to install manually the certificate on every machine in the office. 
 Have you experience something similar? 
 
 Best regards.

FloSupport · Accepted Answer

Hey John Henry Vindas Carballo 
 Aslong as you are deploying the certificate properly via GPO and ensuring that your client PC's are updating their policy, you shouldn't experience this issue. 
 Please note the Microsoft KB and our Web Appliance KB (same procedure for the XG cert) 
 Regards, 
 FloSupport | Community Support Engineer

John Henry Vindas Carballo · Answer

Hello FloSupport, 
 I was deploying the certificate properly but forgot to mention that some users (included myself) are using Firefox 60.0b3 (64-bits). 
 Since Firefox 52, they disabled this feature. Firefox by default will not trust the root certificate store anymore. 
 Here is what I did to fix this: https://serverfault.com/questions/722563/how-to-make-firefox-trust-system-ca-certificates 
 Thank you for the reply FloSupport.