# 5. Setting up the browser certificates

### Importing the web certificates in Google Chrome

1\. Navigate to "chrome://settings/" or open Google Chrome's settings page.

2\. Navigate to "Privacy and security":

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-MklkY8NedA13WUwCeIP%2Fimage.png?alt=media\&token=9391e039-0b3b-4276-af44-0f2eff3495c4)

3\. Scroll down until you see the "Security" section:

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-Mklkfy_6vUWK2xRmRJp%2Fimage.png?alt=media\&token=dcf7b11a-51c2-4533-9a90-7437df535274)

4\. Find the "Manage certificates" section and click it:

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-MklknnzifYArToKSFy5%2Fimage.png?alt=media\&token=05af460b-6a03-42d0-a0d8-4a6737496b18)

5\. This will open up a certificate manager dialog. First thing we need to do is to install the Root CA, as follows:

5.a. Find the "Trusted Root Certification Authorities" tab.

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-Mkll7ENbWwl22_AYGxb%2Fimage.png?alt=media\&token=5e25762b-18c6-4872-9749-a34a85833506)

5.b. Use the "Import" button to import the root.pem file from the web zip archive. Make sure you're using the "All Files" filter in the file browser dialog.

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-MkllZi0KOFMlzK7U_Rh%2Fimage.png?alt=media\&token=6ba99935-0816-45bd-8438-86d03106d24f)

5.c. After successfully importing the Root CA scroll back to the tab named "Personal" in the certificate browser:

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-Mklm-bfaw2fYOhibx9V%2Fimage.png?alt=media\&token=073a4f12-7c1a-4ea9-9435-5f026c40e656)

5.d. Use the import button and browse to the .pfx file, containing the client certificate for the browser. Import it using the name of the user as the password, when asked for it:

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-MklmMRTloRPz-QGO-yO%2Fimage.png?alt=media\&token=4fdab485-2d0c-4e9c-8669-37ce7f67dc4f)

6\. Check if the TimeLine Web server successfully responds using a secure connection:

Accessing the web app using the HTTPS protocol should present the following popup, asking for&#x20;

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-Mklp946ao_lbJH_eQQU%2Fss2.png?alt=media\&token=9c5b12c0-4b59-4577-adaa-cb49c4dacac6)

Once the user presents this valid client certificate, a secure connection is established with the server, as seen by clicking the lock icon next to the URL:

![](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MXf5GuikRIHooatf_sm%2F-MklV_Dy_6FqnRKHb1dL%2F-MklpUWhDx4ANWsQn55Z%2Fimage.png?alt=media\&token=6623ae01-e4cf-4f1c-8e9d-337a996b69e5)

