diff --git a/docs/ninjaone/automations/install-certificate-macintosh.md b/docs/ninjaone/automations/install-certificate-macintosh.md new file mode 100644 index 000000000..f9bc288e5 --- /dev/null +++ b/docs/ninjaone/automations/install-certificate-macintosh.md @@ -0,0 +1,47 @@ +--- +id: 'c4cb39c2-2b84-44d4-985a-90e297c5c85e' +slug: /c4cb39c2-2b84-44d4-985a-90e297c5c85e +title: 'Install Certificate - Macintosh' +title_meta: 'Install Certificate - Macintosh' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'This script installs the certificate to a defined certificate location on MAC machines.' +tags: ['installation', 'security', 'setup'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Overview +This script installs the certificate to a defined certificate location on MAC machines. If no particular location is defined, it will import the certificate at the root location of the machine and apply it to the entire system. + +## Sample Run + +![Image1](../../../static/img/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e/image1.webp) + +## Dependencies + +- [Custom Field - cPVAL MAC Certificate Download URL](/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740) +- [Custom Field - cPVAL MAC CertStoreLocation](/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc) +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Parameters + +| Name | Example | Required | Default | Type | Description | +| ---- | ------- | --------------- | -------- | ------- | ----------- | +|Certificate Download URL| `https://example.com/certficates/DNSFilter.cer` | `False` | - | Text/String | Direct download URL of the certificate. Something like this: https://example.com/certficates/DNSFilter.cer | +| CertStoreLocation | `/System/Library/Keychains/SystemRootCertificates.keychain` | `False` | `/Library/Keychains/System.keychain` | Text/String | Particular keychain to import a certificate on a MAC machine. It could be something like /System/Library/Keychains/SystemRootCertificates.keychain, /Users/YourUsername/Library/Keychains/login.keychain, etc. If nothing is mentioned in the parameter, it will use the default system-wide keychain, applying trusted root certificates to the entire system, i.e., /Library/Keychains/System.keychain. | + +## Automation Setup/Import + +[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/install-certificate-macintosh.ps1) + +## Output + +- Activity Details + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/automations/install-certificate-windows.md b/docs/ninjaone/automations/install-certificate-windows.md new file mode 100644 index 000000000..b75ce446f --- /dev/null +++ b/docs/ninjaone/automations/install-certificate-windows.md @@ -0,0 +1,47 @@ +--- +id: '3f49f6d9-758b-49d6-b425-7e816270aab2' +slug: /3f49f6d9-758b-49d6-b425-7e816270aab2 +title: 'Install Certificate - Windows' +title_meta: 'Install Certificate - Windows' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'This script installs the certificate to a defined certificate location on Windows machines.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Overview +This script installs the certificate to a defined certificate location on Windows machines. If no particular location is defined, it will import the certificate at the root location of the machine and apply it to the entire system. + +## Sample Run + +![Image1](../../../static/img/docs/3f49f6d9-758b-49d6-b425-7e816270aab2/image1.webp) + +## Dependencies + +- [Custom Field - cPVAL Win Certificate Download URL](/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5) +- [Custom Field - cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370) +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Parameters + +| Name | Example | Required | Default | Type | Description | +| ---- | ------- | -------- | ------- | ---- | ----------- | +|Certificate Download URL| `https://example.com/DNSFilter.cer` | `False` | - | Text/String | Direct download URL of the certificate. Something like this: https://example.com/certficates/DNSFilter.cer | +| CertStoreLocation | `Cert:/CurrentUser/Root` | `False` | `Cert:/LocalMachine/Root` | Text/String | A particular certificate store on a Windows system to import the certificate. It could be something like Cert:/CurrentUser/Root, Cert:/LocalMachine/My, etc. If nothing is mentioned in the parameter, it will use the default store location, i.e., `Cert:/LocalMachine/Root`. | + +## Automation Setup/Import + +[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/install-certificate-windows.ps1) + +## Output + +- Activity Details + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/compound-conditions/install-certificate-macintosh.md b/docs/ninjaone/compound-conditions/install-certificate-macintosh.md new file mode 100644 index 000000000..e95aedaf4 --- /dev/null +++ b/docs/ninjaone/compound-conditions/install-certificate-macintosh.md @@ -0,0 +1,38 @@ +--- +id: 'bb552db9-554d-4b72-9492-bf644aadda6e' +slug: /bb552db9-554d-4b72-9492-bf644aadda6e +title: 'Install Certificate - Macintosh' +title_meta: 'Install Certificate - Macintosh' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Triggers the `Install Certificate - Macintosh` automation on Macintosh where certification installation is enabled for Macintosh from `cPVAL Enable Certificate Deployment` custom field.' +tags: ['installation', 'security', 'setup'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Triggers the [Automation - Install Certificate - Macintosh](/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e) on Macintosh where certification installation is enabled for Macintosh using [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). + +## Details + +- **Name:** `Install Certificate - Macintosh` +- **Description:** `Triggers the 'Install Certificate - Macintosh' automation on Macintosh where certification installation is enabled for Macintosh from 'cPVAL Enable Certificate Deployment' custom field.` +- **Recommended Agent Policy:** `MAC Policy` + +## Dependencies + +- [Automation - Install Certificate - Macintosh](/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e) +- [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Compound Condition Creation + +- [Compound Condition Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/compound-conditions/install-certificate-macintosh.toml) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/compound-conditions/install-certificate-servers.md b/docs/ninjaone/compound-conditions/install-certificate-servers.md new file mode 100644 index 000000000..d75e126b2 --- /dev/null +++ b/docs/ninjaone/compound-conditions/install-certificate-servers.md @@ -0,0 +1,38 @@ +--- +id: 'c02dffe5-9db7-4a86-8b39-8c6a6b9fc17d' +slug: /c02dffe5-9db7-4a86-8b39-8c6a6b9fc17d +title: 'Install Certificate - Servers' +title_meta: 'Install Certificate - Servers' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Triggers the `Install Certificate - Windows` automation on Windows Servers where certification installation is enabled for windows Servers from `cPVAL Enable Certificate Deployment` custom field.' +tags: ['installation', 'security', 'setup'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Triggers the [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) on Windows Servers where certification installation is enabled for windows Servers using [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). + +## Details + +- **Name:** `Install Certificate - Servers` +- **Description:** `Triggers the 'Install Certificate - Windows' automation on Windows Servers where certification installation is enabled for windows Servers from 'cPVAL Enable Certificate Deployment' custom field.` +- **Recommended Agent Policy:** `Windows Servers [Default]` + +## Dependencies + +- [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) +- [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Compound Condition Creation + +- [Compound Condition Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/compound-conditions/install-certificate-servers.toml) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/compound-conditions/install-certificate-workstations.md b/docs/ninjaone/compound-conditions/install-certificate-workstations.md new file mode 100644 index 000000000..79c049d1e --- /dev/null +++ b/docs/ninjaone/compound-conditions/install-certificate-workstations.md @@ -0,0 +1,38 @@ +--- +id: 'fe460488-617b-4fc6-944e-5f8cf4c76516' +slug: /fe460488-617b-4fc6-944e-5f8cf4c76516 +title: 'Install Certificate - Workstations' +title_meta: 'Install Certificate - Workstations' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Triggers the `Install Certificate - Windows` automation on Windows Workstations where certification installation is enabled for windows workstations from `cPVAL Enable Certificate Deployment` custom field.' +tags: ['installation', 'security', 'setup'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Triggers the [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) on Windows Workstations where certification installation is enabled for windows workstations using [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). + +## Details + +- **Name:** `Install Certificate - Workstations` +- **Description:** `Triggers the 'Install Certificate - Windows' automation on Windows Workstations where certification installation is enabled for windows workstations from 'cPVAL Enable Certificate Deployment' custom field.` +- **Recommended Agent Policy:** `Windows Workstation [Default]` + +## Dependencies + +- [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) +- [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Compound Condition Creation + +- [Compound Condition Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/compound-conditions/install-certificate-workstations.toml) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-enable-certificate-deployment.md b/docs/ninjaone/custom-fields/cpval-enable-certificate-deployment.md new file mode 100644 index 000000000..1c4765673 --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-enable-certificate-deployment.md @@ -0,0 +1,41 @@ +--- +id: 'd4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e' +slug: /d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e +title: 'cPVAL Enable Certificate Deployment' +title_meta: 'cPVAL Enable Certificate Deployment' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Custom Field to select the operating systems on which the certificate should be deployed.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary + +Custom Field to select the operating systems on which the certificate should be deployed. + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Options | Technician Permission | Automation Permission | API Permission | Custom Field Tab Name | +| ----- | ---- | ---------------- | ---- | -------- | ------------- | ------------- | --------------------- | --------------------- | -------------- | ----------- | +| cPVAL Enable Certificate Deployment | cpvalEnableCertificateDeployment | `Organization`, `Location`, `Device` | Drop-down | False | | | Editable | Read_Write | Read_Write | Install Certificate | + +## Dependencies + +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-enable-certificate-deployment.toml) + +## Sample Screenshot + +![Image1](../../../static/img/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e/image1.webp) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-mac-certificate-download-url.md b/docs/ninjaone/custom-fields/cpval-mac-certificate-download-url.md new file mode 100644 index 000000000..b5bf0a0f5 --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-mac-certificate-download-url.md @@ -0,0 +1,41 @@ +--- +id: '6771a3e9-b9e9-4347-afb7-68c5fc5cf740' +slug: /6771a3e9-b9e9-4347-afb7-68c5fc5cf740 +title: 'cPVAL MAC Certificate Download URL' +title_meta: 'cPVAL MAC Certificate Download URL' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Custom Field to add direct download URL of the certificate.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary + +Custom Field to add direct download URL of the certificate. Something like this: https://example.com/certficates/DNSFilter.cer + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Custom Field Tab Name | +| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | +| cPVAL MAC Certificate Download URL | cpvalMacCertificateDownloadUrl | `Organization`, `Location`, `Device` | Text | False | | Read Only | Read/Write | Read/Write | Install Certificate | + +## Dependencies + +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-mac-certificate-download-url.toml) + +## Sample Screenshot + +![Image1](../../../static/img/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740/image1.webp) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-mac-certstorelocation.md b/docs/ninjaone/custom-fields/cpval-mac-certstorelocation.md new file mode 100644 index 000000000..74c753a9f --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-mac-certstorelocation.md @@ -0,0 +1,40 @@ +--- +id: 'fdaeb10a-efad-47d0-baf4-fd9ee6c074dc' +slug: /fdaeb10a-efad-47d0-baf4-fd9ee6c074dc +title: 'cPVAL MAC CertStoreLocation' +title_meta: 'cPVAL MAC CertStoreLocation' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Custom Field to add a particular keychain to import a certificate on a MAC machine.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Custom Field to add a Particular keychain to import a certificate on a MAC machine. It could be something like `/System/Library/Keychains/SystemRootCertificates.keychain`, `/Users/YourUsername/Library/Keychains/login.keychain`, etc. If nothing is mentioned in the parameter, it will use the default system-wide keychain, applying trusted root certificates to the entire system, i.e., `/Library/Keychains/System.keychain`. + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Custom Field Tab Name | +| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | +| cPVAL MAC CertStoreLocation | cpvalMacCertstorelocation | `Organization`, `Location`, `Device` | Text | False | | Read Only | Read/Write | Read/Write | Install Certificate | + +## Dependencies + +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-mac-certstorelocation.toml) + +## Sample Screenshot + +![Image1](../../../static/img/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc/image1.webp) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-win-certificate-download-url.md b/docs/ninjaone/custom-fields/cpval-win-certificate-download-url.md new file mode 100644 index 000000000..b8f77cbaa --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-win-certificate-download-url.md @@ -0,0 +1,40 @@ +--- +id: '1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5' +slug: /1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5 +title: 'cPVAL Win Certificate Download URL' +title_meta: 'cPVAL Win Certificate Download URL' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Custom Field to add direct download URL of the certificate.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Custom Field to add direct download URL of the certificate. Something like this: https://example.com/certficates/DNSFilter.cer + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Custom Field Tab Name | +| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | +| cPVAL Win Certificate Download URL | cpvalWinCertificateDownloadUrl | `Organization`, `Location`, `Device` | Text | False | | Read Only | Read/Write | Read/Write | Install Certificate | + +## Dependencies + +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-win-certificate-download-url.toml) + +## Sample Screenshot + +![Image1](../../../static/img/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5/image1.webp) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-win-certstorelocation.md b/docs/ninjaone/custom-fields/cpval-win-certstorelocation.md new file mode 100644 index 000000000..b57882864 --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-win-certstorelocation.md @@ -0,0 +1,40 @@ +--- +id: '73a3849d-464c-4bf1-ae15-a93a9bd54370' +slug: /73a3849d-464c-4bf1-ae15-a93a9bd54370 +title: 'cPVAL Win CertStoreLocation' +title_meta: 'cPVAL Win CertStoreLocation' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Custom Field to add a particular certificate store on a Windows system to import the certificate.' +tags: ['installation', 'security', 'setup', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Summary +Custom Field to add a particular certificate store on a Windows system to import the certificate. It could be something like `Cert:/CurrentUser/Root`, `Cert:/LocalMachine/My`, etc. If nothing is mentioned in the parameter, it will use the default store location, i.e., Cert:/LocalMachine/Root. + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Custom Field Tab Name | +| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | +| cPVAL Win CertStoreLocation | cpvalWinCertstorelocation | `Organization`, `Location`, `Device` | Text | False | | Read Only | Read/Write | Read/Write | Install Certificate | + +## Dependencies + +- [Solution - Install Certificates - Windows/Mac](/docs/12034de3-aa3a-4f6c-89da-a6f229e6fbec) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-win-certstorelocation.toml) + +## Sample Screenshot + +![Image1](../../../static/img/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370/image1.webp) + +## Changelog + +### 2026-09-28 + +- Initial version of the document \ No newline at end of file diff --git a/docs/solutions/install-certifcates-ninja.md b/docs/solutions/install-certifcates-ninja.md new file mode 100644 index 000000000..2e69746aa --- /dev/null +++ b/docs/solutions/install-certifcates-ninja.md @@ -0,0 +1,217 @@ +--- +id: '12034de3-aa3a-4f6c-89da-a6f229e6fbec' +slug: /12034de3-aa3a-4f6c-89da-a6f229e6fbec +title: 'Install Certificates - Windows/Mac' +title_meta: 'Install Certificates - Windows/Mac' +keywords: ['certificate', 'windows', 'mac', 'install', 'root', 'trusted', 'keychain', 'location'] +description: 'Manages the deployment of certificates to supported operating systems' +tags: ['installation', 'security', 'setup'] +draft: false +unlisted: false +last_update: + date: 2026-09-28 +--- + +## Purpose + +This solution manages the deployment of certificates to supported operating systems using **NinjaOne custom fields** and automated deployment conditions. + +The solution supports the following platforms: + +* **Windows Workstations** +* **Windows Servers** +* **macOS** + +Users can centrally configure the certificate download URL, the certificate store or keychain location, and the operating systems on which the certificate should be deployed. The appropriate automation is then triggered automatically based on the endpoint's operating system and deployment configuration. + +### Key Capabilities + +1. **Platform Support** + + The solution is designed for **Windows Workstations, Windows Servers, and macOS endpoints**. + +2. **Operating System Selection** + + The [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field is used to select the operating systems on which certificate deployment should be enabled. + +3. **Windows Certificate Deployment** + + Windows certificates can be downloaded from a specified URL and imported into a defined Windows certificate store. + + The certificate store can be customized, for example: + + * `Cert:/LocalMachine/Root` + * `Cert:/LocalMachine/My` + * `Cert:/CurrentUser/Root` + + If no store location is specified, the solution uses `Cert:/LocalMachine/Root` by default. + +4. **macOS Certificate Deployment** + + macOS certificates can be downloaded from a specified URL and imported into a defined keychain. + + The keychain can be customized, for example: + + * `/System/Library/Keychains/SystemRootCertificates.keychain` + * `/Users/YourUsername/Library/Keychains/login.keychain` + * `/Library/Keychains/System.keychain` + + If no keychain is specified, the solution uses `/Library/Keychains/System.keychain` by default. + +5. **Centralized Configuration** + + Certificate deployment settings are managed through NinjaOne custom fields, allowing administrators to configure certificate deployment without modifying the automation scripts. + +6. **Automated Platform Targeting** + + Separate compound conditions are used to target Windows Workstations, Windows Servers, and macOS endpoints. This ensures that the appropriate certificate installation automation is executed on each platform. + +## Associated Content + +### Custom Fields + +| Content | Purpose | +|-----------------------------------------------------|-------------------------------------------------| +| [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) | Custom field used to select the operating systems on which the certificate should be deployed. | +| [cPVAL Win Certificate Download URL](/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5) | Custom field used to specify the direct download URL of the certificate for Windows, for example: `https://example.com/certificates/DNSFilter.cer`. | +| [cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370) | Custom field used to specify the Windows certificate store into which the certificate is imported, for example: `Cert:/CurrentUser/Root` or `Cert:/LocalMachine/My`. If no value is specified, the default store location `Cert:/LocalMachine/Root` is used. | +| [cPVAL MAC Certificate Download URL](/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740)| Custom field used to specify the direct download URL of the certificate for macOS, for example: `https://example.com/certificates/DNSFilter.cer`. | +| [cPVAL MAC CertStoreLocation](/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc) | Custom field used to specify the macOS keychain into which the certificate is imported, for example: `/System/Library/Keychains/SystemRootCertificates.keychain` or `/Users/YourUsername/Library/Keychains/login.keychain`. If no value is specified, the default system-wide keychain `/Library/Keychains/System.keychain` is used, which applies the trusted root certificate to the entire system. | + +### Automation + +| Name | Purpose | +| ---------------------------------------- | --------------------------------------------------------------------------------------------------------- | +| [Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) | Installs the certificate to the defined certificate store on Windows machines. If no store is defined, the certificate is imported into `Cert:/LocalMachine/Root` and applied to the entire system. | +| [Install Certificate - Macintosh](/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e) | Installs the certificate to the defined keychain on macOS machines. If no keychain is defined, the certificate is imported into `/Library/Keychains/System.keychain` and applied to the entire system. | + +### Compound Conditions + +| Name | Purpose | +| ---------------------------------------- | --------------------------------------------------------------------------------------------------------- | +| [Install Certificate - Workstations](/docs/fe460488-617b-4fc6-944e-5f8cf4c76516) | Triggers the [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) on Windows Workstations where certificate installation is enabled for Windows Workstations using the [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). | +| [Install Certificate - Servers](/docs/c02dffe5-9db7-4a86-8b39-8c6a6b9fc17d) | Triggers the [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) on Windows Servers where certificate installation is enabled for Windows Servers using the [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). | +| [Install Certificate - Macintosh](/docs/bb552db9-554d-4b72-9492-bf644aadda6e) | Triggers the [Automation - Install Certificate - Macintosh](/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e) on macOS endpoints where certificate installation is enabled for Macintosh using the [Custom Field - cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e). | + +## Implementation + +### Step 1: Create the Following Custom Fields + +Create all the custom fields listed below in NinjaOne. These are required for the solution to function correctly. + +* [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) +* [cPVAL Win Certificate Download URL](/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5) +* [cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370) +* [cPVAL MAC Certificate Download URL](/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740) +* [cPVAL MAC CertStoreLocation](/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc) + +### Step 2: Configure Certificate Deployment + +Set the [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field to the option that matches the operating systems that should receive the certificate. + +Then configure the certificate download URL and the certificate store or keychain location for each selected platform. + +For Windows endpoints: + +* Specify the certificate download URL in [cPVAL Win Certificate Download URL](/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5). +* Optionally specify the certificate store in [cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370). +* Optionally, specify the certificate store in [cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370). +* If no certificate store is specified, `Cert:/LocalMachine/Root` is used. + +For macOS endpoints: + +* Specify the certificate download URL in [cPVAL MAC Certificate Download URL](/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740). +* Optionally, specify the keychain in [cPVAL MAC CertStoreLocation](/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc). +* If no keychain is specified, `/Library/Keychains/System.keychain` is used. + +### Step 3: Create the Automations + +Set up the following automations: + +* [Automation - Install Certificate - Windows](/docs/3f49f6d9-758b-49d6-b425-7e816270aab2) +* [Automation - Install Certificate - Macintosh](/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e) + +The Windows automation handles certificate installation on Windows Workstations and Windows Servers. + +The Macintosh automation handles certificate installation on macOS endpoints. + +### Step 4: Create the Compound Conditions + +Create the compound conditions that automatically target the appropriate endpoints: + +* [Compound Condition - Install Certificate - Workstations](/docs/fe460488-617b-4fc6-944e-5f8cf4c76516) +* [Compound Condition - Install Certificate - Servers](/docs/c02dffe5-9db7-4a86-8b39-8c6a6b9fc17d) +* [Compound Condition - Install Certificate - Macintosh](/docs/bb552db9-554d-4b72-9492-bf644aadda6e) + +The Workstations compound condition targets Windows Workstations where certificate deployment is enabled. + +The Servers compound condition targets Windows Servers where certificate deployment is enabled. + +The Macintosh compound condition targets macOS endpoints where certificate deployment is enabled. + +## FAQ + +### Q: Which platforms are supported? + +> The solution supports **Windows Workstations, Windows Servers, and macOS endpoints**. + +### Q: Which options are available in the cPVAL Enable Certificate Deployment custom field? + +> The [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field is a drop-down with the following options: +> +> * `Disabled` +> * `Windows Workstations` +> * `Windows Server` +> * `Windows` (Windows Workstations and Windows Servers) +> * `Windows Workstations and Macintosh` +> * `Macintosh` +> * `All` (Windows Workstations, Windows Servers, and macOS) + +### Q: What certificate file format should be used? + +> The solution is intended to download certificate files, such as `.cer` files, from a direct download URL. + +### Q: Where is the certificate installed on Windows by default? + +> If no Windows certificate store is specified, the certificate is imported into `Cert:/LocalMachine/Root`. + +### Q: Where is the certificate installed on macOS by default? + +> If no macOS keychain is specified, the certificate is imported into `/Library/Keychains/System.keychain`. + +### Q: Can I specify a different Windows certificate store? + +> Yes. Use the [cPVAL Win CertStoreLocation](/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370) custom field to specify the required Windows certificate store, such as `Cert:/LocalMachine/My` or `Cert:/CurrentUser/Root`. If no store is specified, the default location is used. + +### Q: Can I specify a different macOS keychain? + +> Yes. Use the [cPVAL MAC CertStoreLocation](/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc) custom field to specify the required macOS keychain. If no keychain is specified, the default location is used. + +### Q: Can the same certificate be deployed to both Windows and macOS? + +> Yes. Select an option in the [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field that includes both platforms (`Windows Workstations and Macintosh` or `All`). Windows and macOS use separate download URL fields, so enter the certificate URL in both [cPVAL Win Certificate Download URL](/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5) and [cPVAL MAC Certificate Download URL](/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740). + +### Q: What happens when certificate deployment is disabled? + +> When the [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field is set to `Disabled` or left empty, the endpoint is not targeted by any of the certificate deployment compound conditions, and the certificate installation automation is not triggered for that endpoint. + +### Q: Why is the automation not running on an endpoint? + +> Verify that: +> +> * The endpoint is a supported **Windows Workstation, Windows Server, or macOS endpoint**. +> * The [cPVAL Enable Certificate Deployment](/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e) custom field is set to an option that includes the endpoint's operating system. +> * The appropriate Workstations, Servers, or Macintosh compound condition is applied to the endpoint's agent policy. +> * A valid certificate download URL has been configured for the endpoint's platform. +> * The configured certificate store or keychain location is valid. +> * The endpoint can access the configured certificate download URL. + +### Q: Is any manual configuration required on the endpoint? + +> No. The solution uses the configured NinjaOne custom fields, automations, and compound conditions to deploy the certificate. + +## Changelog + +### 2026-09-28 + +* Initial version of the document diff --git a/static/img/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5/image1.webp b/static/img/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5/image1.webp new file mode 100644 index 000000000..ce3b1f332 Binary files /dev/null and b/static/img/docs/1c5e34b8-839e-44b0-87ad-d2cb7e21bdd5/image1.webp differ diff --git a/static/img/docs/3f49f6d9-758b-49d6-b425-7e816270aab2/image1.webp b/static/img/docs/3f49f6d9-758b-49d6-b425-7e816270aab2/image1.webp new file mode 100644 index 000000000..9db176ebc Binary files /dev/null and b/static/img/docs/3f49f6d9-758b-49d6-b425-7e816270aab2/image1.webp differ diff --git a/static/img/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740/image1.webp b/static/img/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740/image1.webp new file mode 100644 index 000000000..b86a0f61d Binary files /dev/null and b/static/img/docs/6771a3e9-b9e9-4347-afb7-68c5fc5cf740/image1.webp differ diff --git a/static/img/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370/image1.webp b/static/img/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370/image1.webp new file mode 100644 index 000000000..75cfc781d Binary files /dev/null and b/static/img/docs/73a3849d-464c-4bf1-ae15-a93a9bd54370/image1.webp differ diff --git a/static/img/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e/image1.webp b/static/img/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e/image1.webp new file mode 100644 index 000000000..6ddafc4ba Binary files /dev/null and b/static/img/docs/c4cb39c2-2b84-44d4-985a-90e297c5c85e/image1.webp differ diff --git a/static/img/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e/image1.webp b/static/img/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e/image1.webp new file mode 100644 index 000000000..18439c9e6 Binary files /dev/null and b/static/img/docs/d4f25ab4-f6e9-4f70-a4b5-a7fa61c2e69e/image1.webp differ diff --git a/static/img/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc/image1.webp b/static/img/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc/image1.webp new file mode 100644 index 000000000..611e21fad Binary files /dev/null and b/static/img/docs/fdaeb10a-efad-47d0-baf4-fd9ee6c074dc/image1.webp differ