1. Navigate back to the Start9 Setup App.

  2. Select your claimed Embassy to view the setup results.

  3. Find the “LAN (advanced)” menu item at the bottom of the Setup App screen.

Setup app complete

Completed Setup App screen

  1. Select the “Embassy Local Root CA” menu item. Clicking this will prompt you to “Save to device”.

Setup app advanced menu

Setup App advanced menu


At this point, you may see a yellow messaging indicating you need to reclaim your Embassy to activate this feature. Proceed with the recommendation.

  1. You will be directed to a page in Safari indicating next steps and that the profile has been successfully downloaded. Be sure to complete all steps in this process. These steps are also outlined below.

Certificate install page

Select “Allow” on the certificate install page

  1. Go to Settings on your iOS device.

General settings

General settings

  1. Navigate to General > Profile(s) > Downloaded Profile > Install.


Profiles view

Install profile

Select “Install” for Embassy Local Root CA

  1. Select “yes” to any warning prompts.

  2. Next, navigate to General > About > Certificate Trust Settings.

Certificate trust settings

Select Certificate Trust Settings (scroll all the way down)

  1. Enable full trust for root certificates.

Enable full trust

Toggle to enable full trust for root certificates. “Continue” when warning prompts.

  1. Test that this process worked successfully by navigating to the LAN address provided in the Setup App. You should no longer see warnings about the security of this site in your browser. We recommend using Start9’s own Consulate browser for a faster and better experience.


Unfortunately, Android devices do not yet natively support mDNS, which is used to access LAN addresses on a mobile device browser. As a result, you cannot yet access your LAN address from the browser on Android. We are tracking this issue here, please star it to get more attention from the development team!

We are also working on the Consulate for Android, which will enable this feature by default and allow you to bookmark your LAN address for efficient access to your Embassy over HTTPS. In the meantime, you can access your Embassy on Android using the Tor Browser.