The installation of the Lumiun Certificate Authority (CA) certificate is necessary for users to correctly view Lumiun DNS blocking pages when accessing websites with a secure connection (HTTPS).
About the Lumiun CA Certificate
-
Certificate file: Lumiun CA
-
Validity: until May 29, 2043.
How to install the Lumiun CA certificate
Installation guides by system
- Windows via PowerShell or Script
- Windows via graphical interface
- Windows via Group Policy (AD)
- Firefox on Windows
- iPhone / iOS
- Android
- Macbook / macOS
Windows via PowerShell or Script
- Open PowerShell as an administrator.
- Paste and run the commands below:
$file = "C:\Windows\Temp\LumiunCA.crt"
(New-Object System.Net.WebClient).DownloadFile("https://ldns.io/LumiunCA.crt", $file)
certutil -addstore -enterprise -f "Root" $file
Windows via graphical interface
- Double-click the downloaded file to open the certificate window.
- Click Install Certificate.
- Select the Current User option and click Next.
- Select Place all certificates in the following store and click Browse. Select Trusted Root Certification Authorities and confirm. Click Next.
- Click Finish to confirm the installation.
Windows via Group Policy (AD)
- To distribute the certificate via GPO, follow Microsoft's official guidance: Microsoft Guide - Distribute certificates via GPO.
Firefox on Windows
- Install the certificate on Windows by following these steps.
- Open Command Prompt or PowerShell as an administrator and run the following command.
echo 'pref("security.enterprise_roots.enabled", true);' > "C:\Program Files\Mozilla Firefox\defaults\pref\roots.js" - Restart Firefox for the setting to take effect.
iPhone / iOS
- Go to ldns.io/LumiunCA.crt using Safari.
- When asked if you want to allow the profile to be downloaded, tap Allow.
- Go to Settings → General → VPN, DNS, and Device Management → Lumiun Root CA.
- Tap Install (enter your unlock code).
- A warning will appear, click Install and then Install again.
- Go to Settings → General → About → Trusted Certificates and enable trust in the Lumiun Root CA certificate.
Android
- Access ldns.io/LumiunCA.crt using Chrome.
- After downloading, Android will ask for a name and purpose for the certificate.
- Fill in:
- Name: Lumiun CA
- Used for: VPN and applications
Macbook / macOS
- Open Terminal (Launchpad → type “Terminal”).
- Run the commands below.
curl -o /tmp/LumiunCA.crt https://ldns.io/LumiunCA.crt
sudo security add-trusted-cert -d -p ssl -p basic -r trustRoot -k /Library/Keychains/System.keychain /tmp/LumiunCA.crt - Enter your user password and authorize the change in trust settings.