What to do if the browser reports an HTTPS Certificate error on VIGI NVR & IPC
1352 Contents
Passing the untrusted certificate error message
Introduction
This article outlines the procedures for bypassing browser warnings related to HTTPS certificates and provides detailed configuration steps for installing HTTPS certificates on VIGI IP cameras (IPC) and network video recorders (NVR).
When accessing the VIGI NVR or IPC interface through a web browser using the device’s network IP address, the web browser displays an untrusted certificate error message.
This FAQ aims to resolve these issues by showing a method to continue past this warning message in Chrome, Edge, and Safari. A more permanent solution for Windows and macOS can be used by installing HTTPS certificates on these Operating Systems. Please navigate to the scenario which applies to you.
Requirements
- A Windows or macOS based PC
- A VIGI IPC or NVR
Passing the untrusted certificate error message
Google Chrome
Step 1. Type in the IP Address of the device. Your connection is not private message will appear. Click Show Advanced and click on Proceed.
Step 2. The browser redirects to the device login page.
Microsoft Edge
Step 1. Type in the IP Address of the device. Your connection isn’t private message will appear. Click Show Advanced and click on Continue.
Step 2. The browser redirects to the device login page.
Apple Safari
Step 1. Type in the IP Address of the device. This Connection Is Not Private message will appear. Click Show Details and click on visit this website.
Step 2. The browser redirects to the device login page.
Installing HTTPS certificates
Windows 11
Step 1. Import the HTTP Certificate File.
After successfully login to the VIGI NVR or IPC device, navigate to Settings, System, System Management. Click on the Certificate Management tab, select the Certificate, then click on Export.
Step 2. Install the certificate.
The Certificate can be found in the default Downloads folder. Right click the Certificate and click Install Certificate.
Step 3. Complete the Certificate Installation Wizard.
Click Next, Browse, and select the Trusted Root Certification Authorities option. An explanation of the differences of the Certificate Store options can be found in the QA section. Click OK and Next. On the summary screen, click Finish to complete the Certificate Installation.
Step 4. A security warning may appear. Click Yes to confirm.
Windows Verification
Restart or create a new tab in a browser and attempt to connect to the IP address of a VIGI NVR or IPC.
We have successfully accessed the VIGI device’s page, and there is no "untrusted certificate" error message.
macOS
Step 1. Import the HTTP Certificate File.
After successfully login to the VIGI NVR or IPC device, navigate to Settings, System Settings, System Management. Click on the Certificate Management tab, select the Certificate then click on Batch Export.
Step 2. Install the certificate
Open the downloaded p7b file from the default downloads folder. Select the appropriate Keychain. An explanation of the differences can be found in the QA section. Click on Add.
Step 3. Enter the Password and Click on Modify Keychain.
macOS Verification
Restart the browser and attempt to connect to the IP address of a VIGI NVR or IPC.
We have successfully accessed the VIGI device’s page, and there is no "untrusted certificate" error message.
QA
Q1: What is the difference between the Certificate Store options for Windows?
A1: The certificate store options applicable to this scenario are outlined below.
Personal
Where user-specific certificates (including private keys) are stored. Install here if the certificate is for client authentication or if an application directly uses the user’s certificate.
Trusted Root Certification Authorities
Install the root CA if you are using a self-signed root or an internal CA. This ensures Windows trusts the certificate chain of the device's HTTPS endpoint.
Intermediate Certification Authorities
Install any intermediate CA certificates required by the device’s server certificate chain so Windows can validate it properly.
Trusted People
Optional. Allows trusting a specific certificate directly (e.g., a self-signed certificate for the device) without trusting the issuing CA.
It is recommended to install the issuing CA certificate in the Trusted Root Certification Authorities store. This ensures the device’s certificate is trusted even if its IP address changes, preventing browser security warnings.
Q2: What are the differences between Keychain options for macOS?
A2: Keychain locations determine the scope of trust for a certificate on macOS.
Login keychain
Certificates added here are trusted only for the currently logged-in user. This is suitable for personal testing but not recommended for shared systems or managed environments.
Local Items keychain
This keychain is managed by the system and is mainly used for background services and Apple-managed processes. It is not typically used for manually trusted HTTPS certificates.
System keychain
Certificates added here are trusted system-wide for all users and applications. This is the recommended location for CA or intermediate certificates to ensure persistent HTTPS trust across the device.
Q3: Why does the “untrusted certificate” message appear when accessing the VIGI NVR or IPC?
A3: The message appears because the browser does not recognize the default self-signed HTTPS certificate used by the device.
Q4: Can I ignore the “untrusted certificate” message?
A4: Yes. The VIGI device is trusted within a private network, and the message can be safely ignored. Installing a valid certificate only removes the warning.
Q5: Where is the exported certificate saved?
A5: The exported certificate file is saved in the system’s Downloads folder by default.
Q6: What should I do if the browser still shows a warning after installation?
A6: Clear the browser cache or restart the browser and reconnect to the device using the same IP or domain.
Q7: Will this work for all network devices?
A7: No. For devices with different IP Addresses, this will have to be done for each IP Address. This will have to also be done for each PC and each device IP Address on the network. For the Safari browser, due to its own policies, users still need to manually click to trust.
Q8: Can this be done more than one device at a time?
Q8: Yes. Contact your local administrator and they may be able to assist.
Get to know more details of each function and configuration please go to Download Center to download the manual of your product.
Is this faq useful?
Your feedback helps improve this site.
TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.