My case was over a year ago, something with that I needed a domain for the CA to be setup correctly???The root CA on Untangle is already created once the SSL inspector is installed (1 click), after that an installer is generated for the RCA to be downloaded. Execute the installer on Windows Machines to install the RCA in a couple clicks. Very easy.
However, Untangle WITHOUT SSL Inspection still knows about C&C server because of IP Address, Header, and SNI information and hence, still blocks them, with or without the RCA installed.
Anyway, I had two different employees from Untangle remontering in three times before it worked.
Maybe they learned from that case and simplified it?