How do I fix browser privacy errors?

When you first visit TinyPilot over HTTPS, you'll see a privacy error like this:

This error is expected because TinyPilot secures the HTTPS connection using a key that your system doesn't know about yet.

You can ignore the privacy error, but the better fix is to prevent it in the first place.

The fix

In order for your browser to trust the TinyPilot HTTPS connection, you need to download the TinyPilot device's root certificate and install it on your system. This certificate is secure, as the certificate is unique to your device.

To accept the certificate, follow the instructions below for your operating system:

• Windows
• Debian/Ubuntu
• Mac OS X

Windows

1. Download TinyPilot's root certificate from https://tinypilot/ca.crt

   • If you access your TinyPilot from a different URL, add /ca.crt to the end of your device's URL.
2. Double-click the downloaded ca.crt file
3. When you see the Security Warning, click "Open"
4. Click "Install Certificate..."
5. When prompted for a store location, choose "Local Machine"
6. Choose "Place all certificates in the following store"
7. Click "Browse..." and then click "Trusted Root Certification Authorities"
8. Click Next
9. Click Finish

Debian / Ubuntu

Run the following commands from the terminal:

wget \
    --no-check-certificate \
    https://tinypilot/ca.crt \
    -O tinypilot-ca.crt && \
  sudo mkdir -p /usr/share/ca-certificates/extra && \
  sudo cp tinypilot-ca.crt /usr/share/ca-certificates/extra/ && \
  sudo dpkg-reconfigure ca-certificates

The last command will display a console UI:

1. When prompted "Trust new certificates from certificate authorities?" select "no"
2. Scroll to extra/tinypilot-ca.crt and press the Space key to select it
3. Press the Tab key to select Ok
4. Press the Enter key to complete installation

Mac OS X

1. Download TinyPilot's root certificate from https://tinypilot/ca.crt

   • If you access your TinyPilot from a different URL, add /ca.crt to the end of your device's URL.
2. Double-click the downloaded ca.crt file
3. In the dialog box, choose "System" as the target keychain
4. Click OK
5. When prompted, choose "Always Trust"

Remove TinyPilot CA certificate

If your TinyPilot device's CA private key is ever compromised, you should uninstall the TinyPilot CA certificate from any machine where you added it as a trusted certificate.

• See How do I remove the TinyPilot CA certificate?