Option 2 — Import the controller's local CA into your OS trust store

If you do not have an external certificate, you can add the controller's own CA
to the trust stores of the machines your operators use. Once the OS trusts that
CA, every certificate the controller issues (including future reissues) will be
trusted automatically.

The CA certificate lives on the BNG box at:

/var/lib/quantum-controller/tls/ca-cert.pem

Copy it down to your workstation first:

scp lanner@192.168.X.Y:/var/lib/quantum-controller/tls/ca-cert.pem ./quantum-controller-ca.pem

Then import it into the trust store for your OS:

macOS

  1. Open Keychain Access (Applications → Utilities → Keychain Access).
  2. Select the System keychain in the left panel (not Login, not Local Items).
  3. Drag and drop quantum-controller-ca.pem onto the Keychain Access window.
  4. Double-click the newly added certificate, expand the Trust section, and
    set "When using this certificate" to Always Trust.
  5. Close the window and enter your macOS password when prompted.

Alternatively, from a terminal:

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain quantum-controller-ca.pem

Windows

  1. Press Win+R, type mmc.exe, press Enter.
  2. In the Microsoft Management Console: File → Add/Remove Snap-in →
    select Certificates → Add → choose Computer account → Next →
    Local computer → Finish → OK.
  3. Expand Certificates (Local Computer) → Trusted Root Certification
    Authorities     → Certificates.
  4. Right-click the Certificates folder → All Tasks → Import.
  5. Follow the wizard and select quantum-controller-ca.pem when asked for the
    file. Ensure it is placed in "Trusted Root Certification Authorities".

Ubuntu / Debian

sudo cp quantum-controller-ca.pem /usr/local/share/ca-certificates/quantum-controller.crt
sudo update-ca-certificates

Note the .crt extension — update-ca-certificates requires it. Restart your
browser after running the update.

Need help? Contact support →