Some school and corporate Wi-Fi networks use a certificate authority (CA) that isn’t automatically trusted by Chrome. If you’re getting certificate warnings on a specific network, or IT gave you a certificate file to install, you can import it directly through Chrome’s settings.
Quick answer: Go to chrome://settings/security, scroll to Advanced, and click Manage certificates. Under the “Authorities” tab, click Import, select the certificate file your network admin provided, and check the box to trust it for identifying websites. On a school or work-managed Chromebook, this is usually pushed automatically and you won’t need to do it yourself.
When You’d Actually Need to Do This
- Your personal, unmanaged Chromebook needs to join a network with a private/internal CA (a home lab, a small office network, a self-hosted VPN gateway).
- An admin gave you a certificate file to install manually because your device isn’t enrolled in their management system.
- You’re seeing “Your connection isn’t private” warnings only on one specific network, not the wider internet.
On a Chromebook enrolled in a school or company’s device management, certificates are typically pushed automatically by policy — you won’t see an “Import” step at all in that case.
How to Import a Certificate
- Open Chrome.
- Go to
chrome://settings/securityin the address bar, or navigate to Settings > Privacy and security > Security. - Scroll down and click Advanced to expand more options.
- Click Manage certificates.
- Select the Authorities tab.
- Click Import.
- Browse to the certificate file (usually a
.crt,.cer, or.pemfile) and select it. - When prompted, check the box to trust the certificate for identifying websites, then confirm.
⚠ Only import a certificate from a source you trust completely — a malicious CA certificate can let someone intercept traffic that looks secure.
Still Getting Certificate Warnings?
- Warning persists after importing: confirm you checked the “trust for identifying websites” box during import — an untrusted import won’t fix the warning.
- Warning shows a date error instead: that’s usually unrelated to a missing CA — see our guide on certificate date errors if the message mentions an expired or invalid date.
- Certificate file was sent to you by email or link: download it first through the Files app, then browse to it from the Import dialog rather than trying to open it directly.
- On a managed device and still seeing warnings: contact your school or work IT — this is normally something an admin needs to push, not something you can self-fix.
- Trying to fix general Wi-Fi connection issues instead: see our guide on Chromebooks that won’t connect to school or work Wi-Fi.
FAQ
Do I need to do this for a normal home Wi-Fi network?
No. Regular home networks don’t use custom certificate authorities — this only applies to networks with their own internal or private CA, typically schools, offices, or self-hosted setups.
Is this the same as installing an app certificate for a specific website?
Not quite. This process adds a trusted authority that can vouch for many certificates, rather than trusting one specific site’s certificate individually.
Can I remove an imported certificate later?
Yes. Return to chrome://settings/security > Manage certificates > Authorities, select the certificate, and click Delete.
Why can’t I find “Manage certificates” on my Chromebook?
On some managed devices, certificate management may be hidden or restricted by admin policy. If the option isn’t there, your organization is likely handling certificates centrally already.
