Skip to content
Dew

Use a server with a private certificate

If your Dew server’s certificate comes from your organization’s own certificate authority, install that authority on your computers. The Dew desktop app trusts every certificate authority the computer trusts, so it connects with certificate checks on and without asking people anything.

Mac

Section titled “Mac”

Deploy the authority’s certificate to the same Macs as Dew’s settings: in Jamf Pro or another MDM tool as a Certificate payload, in Intune as a Trusted certificate profile under Devices → macOS → Configuration.

Windows

Section titled “Windows”

Deploy the certificate to Trusted Root Certification Authorities:

  • Group Policy: Computer Configuration → Policies → Windows Settings → Security Settings → Public Key Policies → Trusted Root Certification Authorities, then Import.
  • Intune: create a Trusted certificate profile under Devices → Windows → Configuration.

Linux

Section titled “Linux”

Save the certificate as a PEM file ending in .crt, then:

  • Debian and Ubuntu: copy it to /usr/local/share/ca-certificates/ and run sudo update-ca-certificates.
  • Fedora and RHEL: copy it to /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust.

Turning certificate checks off

Section titled “Turning certificate checks off”

Turn certificate checks off only for a test server on a network you control. Set Verify server certificates to Disabled in Group Policy or Intune on Windows, or set VerifySSL to false on Mac and Linux. People can’t turn checks off themselves in the app.