DiKAS Certificate on Android

In the business Wi-Fi, open http://<LAN-IP>/installcerts (or the setup page http://<LAN-IP>/zertifikat), compare the fingerprint with the main POS and download dikas-local-ca.crt.

1. Open the Android settings.
2. Depending on the manufacturer, choose for example Security → Encryption and credentials → Install a certificate → CA certificate.
3. Choose the downloaded file and confirm the security prompt.
4. Then test https://dikas-<SystemId>.local.

Some devices require a screen lock to install a CA. On company-managed devices, user CAs may be blocked by policy; in that case the administration must distribute the CA through device management.

Several business CAs may be installed at the same time. When a CA changes, the new fingerprint must be visibly compared with the main POS. Never replace a known entry silently. Old CAs can be removed in the list of user certificates as soon as no business uses them any more.

Back to the overview.