As of this article the BYOD network is bypassed in SSL decryption. Any device that joins the BYOD networks (D93 Guest, Bonneville Joint School District, etc) will work fine without having certificate installed on end user device.
If joining a personal device to the secured network (DOD, DOD-ONBOARD, etc) it will require a ContentKeeper Certificate installed on the end user device because those VLANS are being decrypted. Sites such as Google.com, Yahoo.com, Bing.com, DuckDuckGo.com, etc. Users will have to manually install the CK certificate in order to access any decrypted domain, if not they will be met with a CK error page on their web browser.
ContentKeeper certificate can be downloaded by going to:
cert.contentkeeper.com
when connected to the school network and following the instructions there to install on the specific device. End user device may have to be restarted and device may need to forget and reconnect to the school network.
FYI: Many modern phones now have randomized MAC address when connecting to wireless networks. For this reason, every time you join the wireless network after a set period of time (usually 24 hours), a new certificate will have to be installed in order for it to work correctly. This only applies to devices that are joining the VLANS that require certificates to work on SSL decrypted sites.
Comments
0 comments
Please sign in to leave a comment.