Industry guru Dave Taylor offers free tech support on a wide variety of technical and business topics, including HTML, Apple iPhone, online advertising, Cascading Style Sheets, Web design, management, Unix, Linux, search engine optimization, online dating, Mac OS X, shell script programming and Microsoft Windows.

How do I install a trusted root certificate on my Mac?

I keep getting errors about not being able to establish a secure connection with my mail server in Entourage because of a bad root certificate. My ISP has sent me the necessary "trusted root certificate" file, but I have no idea how to install it. Help!


Dave's Answer:

I know just what you mean because I also use an SSL connection to securely access my mail server, keeping things quite a bit more secure on an open wireless wifi network. For a long while I was also getting the error I bet you get:

Cannot establish secure connection: no root ca certificate installed

It turns out that Microsoft has some pretty decent instructions on how to install the certificate that you've gotten from your ISP here: install a trusted cert, but I'll summarize here too!

You first step is to save the certificate to the desktop and double-click on it. It'll launch the Keychain Access application and show you the following dialog box:

Mac OS X: Keychain Access: Add Certificates

Now you'll want to click on the "Keychain" pop-up menu and select "X509 Anchors":

Mac OS X: Keychain Access: Add Certificates: X509

Now click "OK" and enter your administrative password when it prompts you:

Mac OS X: Keychain Access: Authenticate

That should do the trick. You can verify your certificate's installed properly by going to Applications --> Microsoft Office 2004 --> Office and launching "Microsoft Cert Manager". Choose "Apple Trusted Root Certificate Authorities" and then find your new certificate. Double-click it and you should see what I see here:

Mac OS X: Microsoft Office: Microsoft Cert Manager

That all there is to it. Quit and restart Entourage and you should be clear of that pesky error message forever, or at least until the certificate expires!



Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Stumble Upon    

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments

Hello! Hi, My name is Kasey, I'm 20 years old, and am currently residing in Manhattan, KS. I would like to get on Myspace.com, to basically keep in touch with the outside world, because we don't leave center much. (I am in job corps)
They filter every proxy I find, and I'm running out. Can you help me?

Posted by: Kasey at September 11, 2007 7:41 AM

I understand the steps of the procedure outlined above on installing root certificates. However, the first step seems to not be doable; "You first step is to save the certificate to the desktop and double-click on it. It'll launch the Keychain Access application and show you the following dialog box:" How do I actually find the #$%@ certificate to save it? All I get is the "unable to establish . . . " message box, but no certificate.

Posted by: Gordon Antonello at November 21, 2007 1:40 AM

To save the root certificate to your desktop, click on "Show Certificate" then Option+Drag the certificate icon to the desktop.

Posted by: Gavin Anderson at December 17, 2007 7:02 PM

Someone forgot Step 2: Where is The Root Certificate to save?

Step 1: Get error box requesting root cert.
Step 2: ?
Step 3: Drag the Root Cert to the correct location.

lolwtf

Posted by: dude at June 24, 2008 11:49 AM

I have a lot to say, but ...
Starbucks coffee cup I have a lot to say, and questions of my own for that matter, but most of all I'd like to say thank you for all your efforts on this Web site by buying you a chai!

I do have a comment, now that you mention it!











Remember personal info?


Please note that I will never send you any unsolicited commercial email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.









snow leopard pre order advert amazon

Follow me on Twitter @DaveTaylor

Search
Find just the answers you seek from among our 2300+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Book Links
© 2002 - 2009 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]
"Ask Dave Taylor®" is a registered trademark of Intuitive Systems, LLC.