Install ScoutDNS Certificate for Browser HTTPS Errors

Install ScoutDNS Certificate for Browser HTTPS Errors

When a site or domain is blocked by ScoutDNS, a block page is served to the end user in place of the requested domain. If the requested domain was encrypted with HTTPS, then a security error will occur. In order to resolve this and receive a valid block page for HTTPS sites, you must install the ScoutDNS Root Certificate for block pages.


HTTPS Block Page Error

Manual Windows System Install:


Step 1: Download and open the Certificate. Select "Install Certificate".

Click Install Certificate

Step 2: Select "Local Machine" and then select "Next"




Step 3: Choose "Place all certificate in the following store" and then select "Trusted Root Certificate Authorities".




Step 4: Select "Finish" and you are done.


Install Security Certificate with Active Directory GPO


Step 1: Download the ScoutDNS certificate.
Step 2: Open Administrative Tools and Select Group Policy Management 
Step 3: Right click and create a new policy called ScoutDNS Certificate from withing the console tree under the top level of the domain.
Step 4: Select Group Policy Objects in the domain containing the ScoutDNS Certificate Group Policy object (GPO) you want to edit.
Step 5: From within the Group Policy Management Console (GPMC), go to "Computer Configuration > Windows Settings > Security Settings > Public Key Policies".
Step 6: Select/Right-click the Trusted Root Certification Authorities store.
Step 7: Click Import and follow the steps in the Import Wizard to import the downloaded certificate.

The root certificate is now in the Active Directory Trusted Root Certification Authorities container and will be downloaded to any computer that joins the domain.

Manual Mac OS X Install 

Step 1: Download the certificate from within the application. 
Step 2: Double click to open the certificate file.
Step 3: In Add Certificate windows select "Always Trust".
Step 4: Right click on the ScoutDNS certificate and select "Always Trust".

You are finished.

    • Related Articles

    • Relay - Setup and Configure

      ScoutDNS supports a Relay configuration which allows operators to install a lightweight service inside their network. The relay is a local forwarding resolver service that processes queries inside the operator network while relaying public queries to ...

    • Quick Start Setup Guide - WAN Forwarding

      There are three methods you can use to protect your networks and users with ScoutDNS. 1) WAN Forwarding: involves configuring ScoutDNS with your WAN IP address and then forwarding DNS queries from inside your network us our anycast resolver IPs. ...

    • Roaming Clients / Device Agents - Setup, Configure, and Manage

      ScoutDNS provides device agents for organizations what wish to cover devices with DNS layer protection on and off the network. The ScoutDNS device agent is an extremely lightweight application best installed on managed devices where administrative ...

    • YouTube Restricted Mode Explained

      ScoutDNS supports YouTube's restricted modes to provide a level of content control on the YouTube platform. While individual videos cannot be allowed or blocked at the URL level, Google G Suite users can approve individual videos for users within the ...

    • Single Sign On (SSO) Configuration - Entra ID

      Entra ID SSO Enabling Single Sign On (SSO), allows admins to manage access for their instance through Entra ID SSO. ScoutDNS uses the Open ID Connect (OIDC) protocol for secure commination with Entra ID. SSO will disable all existing ScoutDNS ...