Problem:
I am logging into a personally owned device with my weymouthps.org account and am unable to access the internet. Websites are not loading and/or I am seeing a “Your connection is not private” warning.
Summary:
Our student accounts are filtered offsite to protect students’ online activity. To use their weymouthps.org account on a non-district device please see directions here to install a certificate to authenticate to our web filter.
Detailed Explaination:
In order to ensure our devices are filtered offsite to protect our students online and comply with the Child Internet Protection Act we have settings in place that impact all student weymouthps.org accounts. These filtering settings apply to any device the student logs into. However, in order for these settings to work flawlessly you will need to install a certificate on your personal device that authenticates the device with our web filter. If you are having issues accessing the internet while logged in with your weymouthps.org student account on your personally owned device you can follow the directions below.
Directions:
This system is configured to use HTTPS Interception. For this to work your device may require an additional security certificate to avoid problems with HTTPS sites, in particular those with HSTS or HTTPS certificate pinning.
Please note: You only need to apply the inspection root certificate once.
Internet Explorer
- Click the Download the certificate button and save the file
- From the Control Panel, open Internet Options
- Go to Content > Certificates
- Go to the Trusted Root Certification Authorities tab
- Click Import
- Navigate to your download directory and select the file you downloaded earlier
- Click OK
- Restart Internet Explorer
Chrome (Windows)
- Click the Download the certificate button and save the file
- Go to Menu > Settings
- Expand Show advanced settings
- Go to HTTPS/SSL > Manage certificates…
- Go to the Trusted Root Certification Authorities tab
- Click Import
- Navigate to your download directory and select the file you downloaded earlier
- Click OK
- Click Finished and close the settings tab
- Restart Chrome
Firefox (Windows)
- Click the Download the certificate
- When prompted select Trust this CA to identify web sites and click OK
- Restart Firefox
Safari (OS X)
- Click the Download the certificate button and save the file
- From the Finder menu, go to Go > Utilities.
- Launch the Keychain Access application
- From the Keychains panel, click System
- From the Category panel, click Certificates
- Create a new keychain by clicking the [ + ] at the bottom of the Keychain Access window
- Navigate to your download directory and select the certificate file
- Click Open
- If prompted, enter your MAC password and click Modify Keychain Access
- Double-click the relevant certificate in the list
- Expand the Trust section
- In the When using this certificate drop-down, select Always Trust
- Close the certificate window
- When prompted, enter your MAC password to confirm the changes and click Update Settings
- Close the Keychain Access window
iPad, iPhone, iPod, iOS (Safari)
- Click the Download the certificate button
- When prompted, press Install
- If prompted, enter or configure your password to confirm
- Navigate to Settings > General > About > Certificate Trust Settings and enable Full Trust for Root certificates
Android (Chrome)
- Click the Download the certificate button
- When prompted, enter a name of your choice for the certificate
- Click OK
- If prompted, enter or configure your password to confirm
- If prompted, enter a certificate name
- If prompted, from the Credentials use drop-down select VPN and apps
- Click OK
- To confirm certificate installation was successful, navigate to Settings > Trusted credentials
- Select the User tab to view user installed certificates
Chromebook, ChromeOS
- Click the Download the certificate button
- Go to Menu > Settings
- Expand Show advanced settings
- Go to HTTPS/SSL and click Manage certificates…
- Go to Authorities and click Import…
- Navigate to your download directory and select the file you downloaded earlier
- Select Trust this certificate for identifying websites
- Click OK
- Click Finished and close the settings tab
Alternatively, you can log into your personal chromebook (or Chrome browser on your Mac/PC) with a personal gmail account instead of your weymouthps.org account.
