# Installing the Mitel Root Certificate

From MiVoice Business Release 8.0 onwards, the System Admin Tool uses a self-signed SSL certificate instead of the Mitel Root Certificate in earlier releases.

Web browsers are designed not to trust self-signed certificates by default because there is no Certificate Authority
In internet commerce, a third-party (a bank or a firm such as VeriSign or DigiCert) that issues digital certificates to guarantee that the two parties to a transaction are who they claim to be. The CA authenticates a party's identity and creates encryption/decryption keys to secure communication between the parties. to vouch for it. Attempting to connect to an untrusted web site results in a warning page like the one below from Firefox.

Figure 1 - Firefox Certificate Warning

Internet Explorer allows you to continue to the web site but displays the warning each time the site is visited. You can prevent this by adding the certificate to the browser's trusted sites list. Firefox handles the potential security threat by blocking the connection and making you create a security exception before letting you continue to the site. The exception can be permanent or one-time only. If you make it permanent, the warning page is never shown again.

NOTES: (Not applicable to Container-based MiVoice Business (cMiVB))

- You can apply to obtain a certificate from a Certificate Authority (CA) and use it to replace the self-signed certificate MiVoice Business provides. See Security > Web Server in the Server Manager for details for details.

- From MiVoice Business Release 9.0, the CA signed web sever certificate must be obtained through the Server Manager. For more information on installing an SSL Certificate through MSL Server Manager, see Server Manager Help.

- Peripherals such as third-party SIP sets may require a root level CA certificate to connect to the MiVoice Business system. You can use Security > Web Server in the Server Manager to generate the certificate and have it installed by devices that needs it. Using a root level certificate means that peripherals (and browsers) only need to trust it to trust other MiVoice Business systems in the certificate's 'chain of trust'.

## Installing the Mitel Root Certificate

Click here if you are using Firefox.

### Internet Explorer 11

1. Launch the System Administration Tool. The following warning page displays:

Click image to enlarge

2. Click Continue to this website (not recommended).

3. Click Certificate error, followed by View certificates

Click image to enlarge

4. Click Install Certificate.

Click image to enlarge

The Certificate Import Wizard displays:

Click image to enlarge

5. Click Next.

6. Select Place all certificates in the following store, and then click Browse.

Click image to enlarge

6. Select Trusted Root Certification Authorities, and then click OK.

Click image to enlarge

7. Click Next, and then Finish. The following warning displays:

Click image to enlarge

8. Click Yes to confirm that you want to install the certificate. You should see a success message.

9. Click OK to dismiss the message. Do the same in the Certificate dialog box.

10. Exit Internet Explorer, and then restart it. You can now log in to MiVoice Business and not receive the security certificate warnings.

NOTE: If you are unable to log in, clear your browser cache, and then try again.

### Firefox

1. Launch Firefox.

2. Connect to the MiVoice Business system. The following warning page displays:

Click image to enlarge

3. Click Advanced followed by Add Exception...

Click image to enlarge

4. Clear the Permanently store this exception check box, and then click Confirm Security Exception.

Click image to enlarge

5. Once you confirm the exception, the System Admin Tool login page will be displayed. You can now log in to MiVoice Business and not receive the security certificate warnings.

NOTE: If you are unable to log in, clear your browser cache, and then try again.

### Chrome

If you do not have a CA-signed web server certificate installed, a security warning is displayed when you open the System Administration tool. You can install the self-signed web server certificate from Chrome's trusted certificate store. See also Installing Self-signed Certificate.

### Edge

See Installing Self-signed Certificate.