Hi,
I am following-up regarding this post from two years ago. I understand that the Surfshark application for Windows would install a root certificate in the OS certificate store since this was required to support the antiquated IKEv2 protocol. As indicated at the time, Surfshark was deprecating IKEv2 and the root certificate would no longer be required. Can anyone from Surfshark confirm that the updated app no longer includes the root certificate during installation?
Hey there. Thanks for the follow-up. Our support team could get in touch with the appropriate team for this specific question and provide you with an answer. You can get in touch with the at [email protected] or via live chat on our website here: https://support.surfshark.com/hc/en-us
Apologies for the late response. Yes, the root certificate is still installed by the native Windows application. As mentioned in the thread linked in my original post, you can manually remove the certificate from the trusted certificate store in the Windows OS or choose to configure your VPN connections in the open source Wireguard or OpenVPN clients and bypass the Surfshark installer entirely. Surfshark intends to remove this requirement once they fully deprecate support for the IKEv2 protocol.
Thanks for your reply. I’ll open a support request.
Your post/comment has been removed because it violates our subreddit rule “Be constructive and respectful when sharing opinions”.
When it comes to expressing criticism, we encourage a constructive approach that fuels productive discussions and positive growth instead of ranting.
We understand that we all have different perspectives, and sharing them is essential for progress. When expressing your thoughts, consider offering specific suggestions, sharing your experiences, or proposing solutions. This way, we can foster engaging discussions that benefit the entire community.
Please report back here. Be good to know the answer on the forum. Thank you 
Always getting people off to the side, then the rest of us have wasted our time because we don’t see the answer: that is clearly what I said, and it’s constructive: ask here – answer here, then we all benefit!!
it does not install a root certificate