Make your HTTPS CA available for download in the Captive Portal (and elsewhere)

We get asked from time to time how to make the HTTPS Scanning CA available via the Captive Portal so users can install it themselves. I recently discovered that it's possible to do this using base64 encoding and a 'data:' URI. I thought some of you might find this useful. Here's how:

1. Download a copy of your SSL CA file from the XG Firewall. If you're using the built-in CA, it will save as file 'SecurityAppliance_SSL_CA.pem'
2. Next you need to encode the whole file using base64 and output it as a single line. On a Mac or a Linux system, you can do this by running
     $ base64 SecurityAppliance_SSL_CA.pem | tr -d '\n'
3. Now, go to Authentication > Web authentication > Captive portal appearance. In the Login Page Footer HTML text box, paste the following:
   1. <a href='data:application/x-x509-ca-cert;base64,
   2. Now copy and paste the output of the command in step 2 above
   3. '>Download HTTPS certificate authority</a><p>By doing this, you consent to allowing your HTTPS web traffic to be decrypted and scanned for security purposes</p>
      
4. Click 'Preview' to see what it looks like and check that the file downloads correctly when you click on the link. 
   
5. Click Apply to save