School network access
For district IT: fix Chromebook errors that name Fortinet when opening SLC Intelligence.
This is a district firewall certificate issue
If Chrome shows NET::ERR_CERT_AUTHORITY_INVALID and mentions Fortinet, the school network is intercepting HTTPS. SLC Intelligence cannot install Fortinet trust on Chromebooks or create FortiGate exceptions from the app. District IT must apply one of the options below.
Quick check
- Open https://www.slcintelligence.com on a phone hotspot or home Wi‑Fi.
- If it loads off school Wi‑Fi, our public certificate is fine — Fortinet trust or an inspection exception is still needed on campus.
- Do not ask staff to bypass certificate warnings on managed Chromebooks.
Option A — Trust the Fortinet CA (recommended)
- Export the FortiGate SSL deep-inspection CA used on staff policies.
- In Google Admin, push that CA to managed Chromebooks as a trusted certificate authority.
- Have staff sign out/in or reboot so the profile loads the new trust.
Option B — SSL inspection exception (allowlist)
Exempt these hosts from HTTPS / SSL deep inspection (and allow outbound TCP 443 if needed):
| Host | Purpose |
|---|---|
| slcintelligence.com | Apex domain |
| www.slcintelligence.com | Canonical web app (use this URL) |
| *.supabase.co | Sign-in / API (production Supabase project) |
| *.vercel.app | Optional: preview deployments only (not required for production) |
Paste-ready list: slcintelligence.com, www.slcintelligence.com, *.supabase.co, *.vercel.app
What we verified on our side
- Production hosts use public Let’s Encrypt certificates on Vercel.
- Canonical site: https://www.slcintelligence.com (apex redirects here).
- We do not operate your FortiGate, Google Admin, or Chromebook certificate store — those are district controls.
More product support: Support. Internal runbook: docs/SCHOOL_NETWORK_ACCESS.md.