Industry guru Dave Taylor answers free tech support questions about a wide variety of business and technical topics, including blogging, Google AdSense, MySpace, Sony PSP, Apple iPod, Mp3 players, management, Linux, SEO, Mac OS X, Facebook, Twitter, LinkedIn and Microsoft Windows.

How do I install a root certificate with Microsoft Entourage?

I'm trying to get Microsoft Entourage on my Mac to work with an SSL-based mail server, but every time I try to use it, I get errors about "unverified root certificate" or uninstalled root certificates. I've dug around on my SSL server and can't figure out what the heck Entourage wants. Help!


Dave's Answer:

it's surprisingly difficult to figure out how to install a root certificate in Microsoft's Entourage, actually, though I think the problem is generally just with security certificates, not Entourage, per se. I think I have it working on my system, however, and here's what I did.

First step was to log in to the SSL server -- in this case it's a Linux box running Apache -- and switch to root with the "su" command. Now, move into the directory /etc/mail/certs and you'll find a file with a strange numeric name like "0cf916dd.0". That's what you want. I suggest you copy that file to your own home directory and make sure you leave it accessible for later:

# cp 0cf916dd.0 ~taylor
# chown taylor ~taylor/0cf916dd.0
# ls -l ~taylor/0cf916dd.0
-r-------- 1 taylor taylor 863 Oct 17 07:24 /home/taylor/0cf916dd.0

Looks good. Now, quit superuser, then disconnect and reconnect with your SFTP client application (I certainly hope that you are NOT using FTP to connect. It's notoriously insecure), and download the copy of the security certificate you've left in an accessible place:

sftp> get 0cf916dd.0
Fetching /home/taylor/0cf916dd.0 to 0cf916dd.0
/home/taylor/0cf916dd.0     100% 863 0.8KB/s 00:00
sftp>

Now you need to add a new filename suffix to the file before you can proceed (an important step!). Click once on the new file's name, count to 10, then click again. You should be able to edit the filaname: add the suffix ".crt" to it. You'll need to verify the change:

Change Extension on Root certificate?

Finally, it's time to open up a new Finder window and navigate into Applications --> Utilities. Now, drag the root certificate on top of the Keychain Access application:

Root Certificate Dragged Atop Keychain Access

Now the Keychain Access application itself will confirm you want to install the new security certificate:

Add Root Certificate to Keychain

Important step: Make sure that you specify you want it to be filed away as an X509 Anchor certificate, as shown. Click on "OK" and you're done!

Now, the next time you use Entourage in secure mode, you should be able to interact with your SSL-based secure server without a problem.



Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Simpy.

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments
Rather amazingly, there are no comments on this article yet.

I have a lot to say, but ...
Starbucks coffee cup I have a lot to say, and questions of my own for that matter, but most of all I'd like to say thank you for all your efforts on this Web site by buying you a chai!

I do have a comment, now that you mention it!









Remember personal info?


Please note that I will never send you any unsolicited commercial email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.









Uniblue: Free Virus Scan

Search
Find just the answers you seek from among our 1700+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Join the List!
Join my author info mailing list, where you'll learn about my upcoming books, speaking gigs, and more!


Book Links
© 2002 - 2008 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]