My new employer wants me to install a root certificate on my computer as trusted in order to work remotely. I believe it is to use Cisco AnyConnect vpn. I don't really have a clear understanding of how they work so I wanted to come here to get some advice. It seems like they could monitor my web traffic by having me install this root certificate is that correct? If they could gather information on my browsing habits or what I'm doing in my spare time I would rather get a new computer dedicated solely for work.
I'm just not sure if a trusted root certificate can be abused in this way.
Edit: This is on my own personal home computer, not a work computer. I want to ensure my employer cannot view my personal files or my internet browsing habits.
According to the instructions, they want me to install a trusted root certificate from them (the employer). They say I may have warnings when I am installing it but to just disregard it.
From what I gather it seems like the root certificate is to access the vpn. My apologies if this doesn't make sense, I don't know much about it myself and it was very difficult finding information on google to determine if trusted root certificates can be exploited or whether it is ok to install it on your personal computer.
The root certificate information appears to be associated with the vpn information in the manual so I assumed it was required to authorize you to access the company website/servers through AnyConnect.
My goal is that when I am not connected to AnyConnect, my employer can't see what websites I visit. I would also not want them to see what files I have on my PC at any time (whether I'm connected to AnyConnect or not). Basically I don't have a problem with my employer monitoring what websites I go to when I'm using anyconnect, but in my private time I don't want them having access to that because it's private.
Thank you for the advice on getting a new machine. Hopefully their monitoring only extends to the PC with the trusted certificate and not the wireless network it is on.
Edit 2: Thank you for the answers everyone. From what I gather from all the combined answers is that when connected to the vpn the company can view my internet traffic. When I'm not connected to the vpn, they generally do not, unless they wanted to be sneaky (unlikely but a possibility nonetheless). I think that in this case it would seem the safest option is to purchase a separate work pc. Thank you for all of your help!