TG VAULT KEY — Other / managed device CA INSTALLATION

Certificate: O=TG Vault Key
CN=TG Vault Key Root CA
Issuer: O=TG Vault Key
CN=TG Vault Key Root CA
Valid until: Jun 15 00:42:59 2036 GMT
SHA-256 certificate fingerprint (DER):
E5:CA:EC:C9:E6:08:21:E1:C2:A1:C7:C1:6E:64:34:74:4E:1D:46:62:C3:D5:18:5E:BC:B0:E7:4D:71:38:A1:89

BEFORE YOU INSTALL
A trusted root can authenticate websites on this device. Confirm this fingerprint with your administrator through an independent channel; this download cannot prove its own authenticity. No password, private key, or automatic installer is included. Never bypass browser certificate warnings.

1. Extract this ZIP and retain tg-vault-key-root.crt plus this guide.
2. This platform could not be identified. Select the correct platform on the invitation page and download its package, or ask the device administrator for the manufacturer's supported CA installation procedure.
3. Verify the fingerprint independently before granting trust. Managed devices, TVs, and appliances may not support user-installed roots. Do not disable TLS validation, root the device, or import this as a client identity.
Removal: ask the device administrator to remove only this exact root certificate from its trust store.

VERIFY SETUP
Activate your WireGuard tunnel, return to your original invitation, and select Verify tunnel connection, then Verify certificate trust as prompted. Downloading or installing this file does not mark setup verified. Keep the invitation private; it is intentionally not included in this package. If HTTPS still fails, check the device clock, tunnel/DNS connectivity, and trust store with your administrator.
