1. Support Center
  2. Documentation
  3. Desktop editions
  4. Getting started
  5. Configure Burp Proxy to work with an external browser
  6. Installing Burp's CA certificate
  7. Internet Explorer

Installing Burp's CA certificate in Internet Explorer

Before attempting to install Burp's CA certificate, make sure that you have successfully confirmed that the proxy listener is active and have configured your browser to work with Burp

Note: If you previously installed a different CA certificate generated by Burp, you should remove it before installing a new one.

To install Burp's CA certificate in Internet Explorer, proceed as follows:

Right-click on the Internet Explorer icon and select "Run as administrator".

Run IE as admin

With Burp running, visit http://burpsuite in Internet Explorer. You should be taken to relatively plain web page containing a link to download the CA certificate. If not, please refer to the proxy troubleshooting page. Depending on what went wrong, you may be taken there automatically.

Click "CA Certificate" to download your unique Burp CA certificate. Take note of where you save this.

IE download CA certificate

Open the downloaded file. The "Certificate" dialog will open. Click "Install Certificate". In the "Certificate Import Wizard" dialog, click "Next". Select "Place all certificates in the following store" and click "Browse".

IE install CA certificate

In the "Select Certificate Store" dialog, select "Trusted Root Certification Authorities" and click "OK".

Click "Next" and then "Finish". Close all dialogs and restart Internet Explorer. With Burp still running, try and browse to any HTTPS URL. If everything has worked, you should now be able to browse to the page without any security warnings.

IE select certificate store

Removing Burp's CA certificate from Internet Explorer

To remove Burp's CA certificate from Internet Explorer:

  1. Right-click on the Internet Explorer icon and select "Run as administrator".
  2. Open the "Internet Options" and, on the "Content" tab, click "Certificates".
  3. On the "Trusted Root Certification Authorities" tab, select "PortSwigger CA" and click "Remove".
  4. Select "Yes" each time you are prompted and then restart Internet Explorer.