SOTI Pulse Logo

SOTI Surf security warning

M
Majid
bolcom

We're testing SOTI Surf in combination with SOTI lockdown (kiosk/single app) on a device running Android 4.4.4 (soon on Android 7).

Only one URL is white-listed and set as home page. The website is opened, but then SOTI Surf prompts a security warning:

There’s a problem with this website’s security certificate. Proceed anyway?

After pressing 'OK', the webpage is shown. SOTI Surf is configured, but I'm unable to locate the security settings which could disable this message. Under SOTI Surf Privacy Settings I was unable to find a suitable option.

soti-surf security-certificate
7 years ago
Android
ANSWERS
RC
Raymond Chan Diamond Contributor
7 years ago (edited 7 years ago)

As far as I know, there is no such option at the moment.  You might have to file a feature request to SOTI to add it to their future SURF.

In the meantime,  there may be a quick solution under your control.  If the target server is your company's own site (web-/app-server) and is using a self-signed SSL certificate rather than a paid SSL certificate from reputable CA, then one possible solution may be to install the self-signed CA root certificate which was used to generate the self-signed SSL certificate of the site to the trust store on your device via the certificate payload of a MobiControl profile.  After that,  the SURF secure browser (or any browser on the device) will consider your target web server safe and no warning message will be shown.

M
Majid
7 years ago

Thanks for the suggestion. Unfortunately it's not a self-signed SSL certificate. I've sent a feature request to SOTI.

B
Bhav
6 years ago (edited 6 years ago)

Hi,

Know this is a bit of an old thread, but was this issue resolved?

If yes, HELP! please. I am still getting this exact message via Android 8, Surf v14.4.3.3

If no, bugger me sideways...

Thanks in advance

RC
Raymond Chan Diamond Contributor
6 years ago

Do you have such problem for every site that Soti-Surf browse to?   What are the CA for the SSL certificates from the problematic target sites?  

B
Bhav
6 years ago
We are using the MobiControl Root CA, because IIS is serving both SOTI and our website.
The security warning still comes up in Soti Surf even after installing the certificate on the device. This seems to be an issue for any self-signed certificate
RC
Raymond Chan Diamond Contributor
6 years ago

The issue is with the root certificate of the SSL certificate associated with the URL target that the browser access, not the MobiControl self-signed root certificate, which is typically parent to the certificate of  MobiControl server and various other services other than web-console and deployment server extension.

If the CA is not a reputable one, the paid SSL certificate that it sell will not be acceptable to safe security browsers from reputable vendors.

Similar Discussions