<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Windows 11 Fog Client install failing with HTTPS]]></title><description><![CDATA[<p dir="auto">Getting failed to pin cert on Windows 11 EDU (latest) when installing the client with HTTPS.</p>
<p dir="auto">I’ve tried the MSI with a script and the smart installer.</p>
<p dir="auto">Server is running 1.5.2495 on Ubuntu 22.04</p>
]]></description><link>http://forums.fogproject.org/topic/18255/windows-11-fog-client-install-failing-with-https</link><generator>RSS for Node</generator><lastBuildDate>Wed, 23 Sep 2026 14:15:31 GMT</lastBuildDate><atom:link href="http://forums.fogproject.org/topic/18255.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 23 Sep 2026 12:36:30 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Windows 11 Fog Client install failing with HTTPS on Wed, 23 Sep 2026 13:45:37 GMT]]></title><description><![CDATA[<p dir="auto"><a class="mention plugin-mentions-user plugin-mentions-a" href="http://forums.fogproject.org/uid/38941">@astrugatch</a> Thanks, I can reproduce this.</p>
<p dir="auto">Cause: since 1.5.10.2253 the server signs its HTTPS certificate with a “FOG Web CA” intermediate under the FOG Server CA. The client installer only accepts an HTTPS certificate issued directly by “FOG Server CA” when it downloads ca.cert.der, so the download fails and the pin fails. The fix is in the client: <a href="https://github.com/FOGProject/zazzles/pull/48" target="_blank" rel="noopener noreferrer nofollow ugc">https://github.com/FOGProject/zazzles/pull/48</a>. It needs a new client release.</p>
<p dir="auto">Workaround until then, either one:</p>
<ul>
<li>Trust the FOG CA before you install. Download <code>http://&lt;fog-server&gt;/fog/management/other/ca.cert.der</code> (plain HTTP works), then run <code>certutil -addstore Root ca.cert.der</code> as administrator. Then run the HTTPS install as before.</li>
<li>Or install with HTTPS off. The client downloads the CA over HTTP, and the server redirects it to HTTPS after that.</li>
</ul>
]]></description><link>http://forums.fogproject.org/post/158754</link><guid isPermaLink="true">http://forums.fogproject.org/post/158754</guid><dc:creator><![CDATA[Tom Elliott]]></dc:creator><pubDate>Wed, 23 Sep 2026 13:45:37 GMT</pubDate></item></channel></rss>