CCS Zscaler Root Security Certificate Installation

Cherokee County Schools uses Zscaler for Internet content filtering. In order to access secure "https://" sites a current Zscaler Root Security Certificate must be installed on the device. District owned devices receive Zscaler Root Security Certificate pushes automatically. Users may be required to authenticate to the content filter system to gain access to certain sites based on age appropriateness.

Visitors from off campus may obtain the guest username and password from school staff.


Select your device type below for detailed instructions.


  • You will need to perform these tasks through the Safari mobile web browser. Note: The "Chrome App" for iOS is not currently compatible. Please use the "Gmail, Drive, etc." apps from the AppStore instead.
  • Click the link to download the file.
  • Click "Install". Zscaler certificates are not in the Apple trusted certificates list. Simply ignore the warnings.
  • If you have a passcode on your iPad, you will need to enter it when prompted.
Very Important: Once installed (green verified checkmark) you will need to go to Settings > General > About > Certificate Trust Settings and enable Zscaler Root CA and click "Continue" on the warning.


Site Shortcut: zscaler.cherokee.k12.nc.us  (do not include the https://) 


 Download SHA-256 Z-Scaler Root Certificate
  • Click the link to download the Z-Scaler certificate.
  • Android will ask you to name the certificate. Provide a name for the certificate (example: Zscaler2048)
  • The certificate will be installed and you will be asked if it applies to "VPN and apps" or "WiFi". Choose "VPN and apps"
  • Note: you will be forced to use the lock screen feature of your Android device when you install this certificate. This is a function of how Android is designed.
Very Important: Once installed (green verified checkmark) you will need to go to Settings > General > About > Certificate Trust Settings and enable Zscaler Root CA and click "Continue" on the warning.


Site Shortcut: zscaler.cherokee.k12.nc.us  (do not include the https://) 


 Download SHA-256 Z-Scaler Root Certificate

Windows with Windows 10, using Edge, top right click more actions, open with Internet Explorer:

  • Download the ZScaler Certificate and save to your location choice (desktop, flash drive, etc).
  • Open Internet Explorer. From IE, go to the Tools menu, select Internet Options, and then in the window that appears switch to the Content tab and click the "Certificates" button.
  • To install the certificate go to the Trusted Root Certification Authorities tab and click the Import button.
  • In the Certificate Import Wizard window that appears click the Next button. To select the file, press the Browse button. Find the saved certificate file (desktop, flash drive, etc.) and click the Open, Next and Finish buttons.
  • Close and restart the Web browser.

  •  Windows with Google Chrome Web Browser

    • The Chrome web browser pulls its certificate configuration from Internet Explorer, therefore no further action is required. Once the Certificate is installed successfully to Internet Explorer, Google Chrome will also work with the Z-Scaler Content Filter.
    • You will need to close and restart the Chrome Browser if you have it open when you install the certificate in Internet Explorer.


     Windows with Firefox Web Browser

    • Shortcut: Double click the Zscaler link using Firefox.Check all three checkboxes. Click "OK". Done!
    • Alternate Method: Download the ZScaler Certificate and save to your location choice (desktop, flash drive, etc).
    • Open Firefox.
    • Go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab
    • Click the "Certificates" tab. Select "View Certificates"
    • Then "Authorities" and then click the "Import..." button.
    • In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.
    • When you find the saved certificate file (ZscalerRootCertificate-2048.crt) click the "Open" button..."Check all three boxes", Click "OK". Done!


    Site Shortcut: zscaler.cherokee.k12.nc.us  (do not include the https://) 


     Download SHA-256 Z-Scaler Root Certificate

     Download Fortinet SSL Inspection Certificate  RIGHT CLICK and choose "Save Link As..."
  • Click the link to download the Z-Scaler certificate.
  • Double-Click files and depending on your version of OS X, the "Keychain" window will open, where you will install the Z-Scaler Certificates.
  • "Add Certificates" window, select "System", under "Keychain"....click "Add".
  • Enter your device password.
  • Double click the certificate and choose "Always Trust".
  • Enter your device password.


 Firefox Web Browser for Mac

Shortcut: Double click the link below using Firefox. Check all three checkboxes. Click "OK". Done!


Alternatively:
  • Download the ZScaler Certificate (ZscalerRootCertificate-2048-SHA256.crt) and save to your location choice (desktop, flash drive, etc).
  • Open Firefox.
  • From Firefox, go to the Tools menu (three dashes), select Options, and then in the window that appears switch to the Advanced tab and click the "Certificates" tab.
  • Select "View Certificates"and then "Authorities" and then click the "Import..." button.
  • In the Certificate Import Wizard window that appears browse for the Zscaler Certificate you downloaded to your location of choice.
  • When you find the saved certificate file (ZscalerRootCertificate-2048-SHA256.crt) click the "Open" button.
  • "Check all three boxes", Click "OK". Done!


Site Shortcut: zscaler.cherokee.k12.nc.us  (do not include the https://) 


 Download SHA-256 Z-Scaler Root Certificate
  • Download the Z-Scaler certificate to a USB flash drive or it will automatically save to the downloads folder on the Chromebook.
  • Open Settings from the Chromebook browser's menu.
  • Select Show advanced settings.Find HTTPS/SSL and click Manage certificates.
  • Select Authorities.
  • Scroll down and click Import.
  • Choose the certificate from the location that it was saved to and click Open.
  • Select "Trust this certificate" for identifying websites.
  • Click OK to finish the process.
  • Close all dialogue boxes.


**Certificates are user specific on Chromebooks, not device specific which means each new user would need to do the above tasks.


Site Shortcut: zscaler.cherokee.k12.nc.us  (do not include the https://) 


 Download SHA-256 Z-Scaler Root Certificate