Remove mentions of restricting custom certificates to CfB (#49355)
Co-authored-by: Isaac Brown <101839405+isaacmbrown@users.noreply.github.com>
This commit is contained in:
@@ -21,8 +21,6 @@ By default, {% data variables.product.prodname_copilot %} connects to {% data va
|
||||
|
||||
Some networks use an HTTP proxy server to intercept Internet traffic before sending it to its intended location. Companies often use an HTTP proxy to detect suspicious traffic or restrict the content entering their networks. If you're working on a corporate network, you may need to configure {% data variables.product.prodname_copilot_short %} to connect via an HTTP proxy.
|
||||
|
||||
If you have a license for {% data variables.product.prodname_copilot_business_short %}, {% data variables.product.prodname_copilot_short %} can read custom SSL certificates installed on a user's machine. This allows a proxy server to be identified as the intended recipient of {% data variables.product.prodname_copilot_short %}'s secure connection, so network traffic can be inspected. Without a custom certificate, a company can use an HTTP proxy to monitor, route, and terminate {% data variables.product.prodname_copilot_short %}'s connection, but cannot inspect the contents of the traffic.
|
||||
|
||||
## Configuring proxy settings for {% data variables.product.prodname_copilot %}
|
||||
|
||||
{% data variables.product.prodname_copilot %} supports basic HTTP proxy setups. If you need to authenticate to a proxy, {% data variables.product.prodname_copilot %} supports basic authentication or authentication with Kerberos. If the proxy URL starts `https://`, the proxy is not currently supported.
|
||||
@@ -137,7 +135,7 @@ If the default SPN isn't correct for your proxy, you can override the SPN in {%
|
||||
|
||||
## Allowing {% data variables.product.prodname_copilot %} to use custom certificates
|
||||
|
||||
If your organization uses {% data variables.product.prodname_copilot_business_short %}, {% data variables.product.prodname_copilot_short %} can read custom SSL certificates installed on a user's machine.
|
||||
{% data variables.product.prodname_copilot_short %} can read custom SSL certificates installed on a user's machine. This allows a proxy server to be identified as the intended recipient of {% data variables.product.prodname_copilot_short %}'s secure connection, so network traffic can be inspected. Without a custom certificate, an HTTP proxy can be used to monitor, route, and terminate {% data variables.product.prodname_copilot_short %}'s connection, but not to inspect the contents of the traffic.
|
||||
|
||||
{% data variables.product.prodname_copilot_short %} reads certificates from the operating system's trust store. It also reads extra certificates from the file specified by the standard Node.js environment variable `NODE_EXTRA_CA_CERTS`. For more information, see the [Node.js documentation](https://nodejs.org/docs/latest-v18.x/api/cli.html#node_extra_ca_certsfile).
|
||||
|
||||
|
||||
@@ -59,12 +59,6 @@ If you know you are connecting via a proxy, make sure the proxy is configured co
|
||||
|
||||
Depending on your proxy setup, you may encounter errors like "certificate signature failure," "custom certificate," or "unable to verify the first certificate." These errors are usually caused by a corporate proxy setup that uses custom certificates to intercept and inspect secure connections.
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** {% data variables.product.prodname_copilot %} only supports custom certificates if you have a {% data variables.product.prodname_copilot_business_short %} or {% data variables.product.prodname_copilot_enterprise_short %} license. For more information, see "[AUTOTITLE](/copilot/about-github-copilot)."
|
||||
|
||||
{% endnote %}
|
||||
|
||||
Some possible ways to resolve certificate-related errors are:
|
||||
- Configure a different proxy that does not intercept secure connections.
|
||||
- If you are using a corporate proxy, contact your IT department to see if they can configure the proxy to not intercept secure connections.
|
||||
|
||||
@@ -74,12 +74,6 @@ If you encounter problems connecting to {% data variables.product.prodname_copil
|
||||
|
||||
## Troubleshooting certificate-related errors
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** If your error is related to certificates, it helps to check these logs for the `Custom Certificates:` line. If this line says `disabled`, you are not using {% data variables.product.prodname_copilot_for_business %}, so custom certificates are not supported. For more information, see "[AUTOTITLE](/copilot/overview-of-github-copilot/about-github-copilot-business)."
|
||||
|
||||
{% endnote %}
|
||||
|
||||
If you're using a custom certificate, ensure the certificate is installed correctly in the operating system, see "[AUTOTITLE](/copilot/troubleshooting-github-copilot/troubleshooting-network-errors-for-github-copilot)". Then use the following troubleshooting steps.
|
||||
|
||||
1. In the menu bar, click **Tools**, select **{% data variables.product.prodname_copilot%}**, and click **Log CA Certificates**.
|
||||
@@ -133,12 +127,6 @@ If you encounter problems connecting to {% data variables.product.prodname_copil
|
||||
1. Type "Diagnostics", and then select **{% data variables.product.prodname_copilot%}: Collect Diagnostics** from the list. This opens a new editor with the relevant information that you can inspect yourself or share with the support team.
|
||||
1. Check the section on **Reachability** to determine if {% data variables.product.prodname_copilot%} can actually access the necessary services.
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** If your error is related to certificates, it helps to check these logs for the `Custom Certificates:` line. If this line says `disabled`, you are not using {% data variables.product.prodname_copilot_for_business %}, so custom certificates are not supported. For more information, see "[AUTOTITLE](/copilot/overview-of-github-copilot/about-github-copilot-business)."
|
||||
|
||||
{% endnote %}
|
||||
|
||||
## Viewing Electron logs
|
||||
|
||||
In rare cases, errors might not be propagated to the corresponding error handlers and are not logged in the regular locations. If you encounter errors and there is nothing in the logs, you may try to see the logs from the process running {% data variables.product.prodname_vscode_shortname %} and the extension.
|
||||
|
||||
@@ -6,10 +6,6 @@ These features are availabe to organization owners and administrators to manage
|
||||
|
||||
Content exclusions allow you to configure {% data variables.product.prodname_copilot %} to ignore certain files in your repository. This can be useful if you have files that you don't want to be available to {% data variables.product.prodname_copilot %}. For more information, see "[AUTOTITLE](/copilot/managing-github-copilot-in-your-organization/configuring-content-exclusions-for-github-copilot)."
|
||||
|
||||
### Custom certificates
|
||||
|
||||
For organizations using {% data variables.product.prodname_copilot_for_business %} or {% data variables.product.prodname_copilot_enterprise %}, {% data variables.product.prodname_copilot %} can read custom SSL certificates installed on a user's machine. For more information, see "[AUTOTITLE](/copilot/configuring-github-copilot/configuring-network-settings-for-github-copilot#allowing-github-copilot-to-use-custom-certificates)."
|
||||
|
||||
### Managing access to {% data variables.product.prodname_copilot %}
|
||||
|
||||
Organization owners can manage access to {% data variables.product.prodname_copilot %} for their organization, and review usage data to inform their decision. For more information, see "[AUTOTITLE](/copilot/managing-github-copilot-in-your-organization/managing-access-for-copilot-business-in-your-organization)."
|
||||
|
||||
@@ -13,11 +13,8 @@
|
||||
| Organization-wide policy management | {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |{% octicon "check" aria-label="Included" %} |
|
||||
| Exclude specified files | {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |{% octicon "check" aria-label="Included" %} |
|
||||
| Audit logs | {% octicon "x" aria-label="Not included" %} |{% octicon "check" aria-label="Included" %} |{% octicon "check" aria-label="Included" %} |
|
||||
| HTTP proxy support via custom certificates | {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |{% octicon "check" aria-label="Included" %} |
|
||||
|{% data variables.product.prodname_copilot_chat_dotcom_short %}|{% octicon "x" aria-label="Not included" %}| {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |
|
||||
|{% data variables.product.prodname_copilot_for_prs %}|{% octicon "x" aria-label="Not included" %}| {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |
|
||||
|{% data variables.product.prodname_copilot_for_docs %}|{% octicon "x" aria-label="Not included" %}| {% octicon "x" aria-label="Not included" %} | {% octicon "check" aria-label="Included" %} |
|
||||
|
||||
{% endrowheaders %}
|
||||
|
||||
For more information about proxy support with custom certificates, see "[AUTOTITLE](/copilot/configuring-github-copilot/configuring-network-settings-for-github-copilot)".
|
||||
|
||||
Reference in New Issue
Block a user