X.509 personal certificate, how to import

Hi

Per Keychain Access help menu:

To add a certificate to a keychain:
Drag the certificate file onto the Keychain Access icon or double-click the certificate file.

If you want to view the contents of the certificate before you add it, click View Certificates in the dialog, and then click OK when you are done.

Choose a keychain from the pop-up menu and click OK.

If you’re asked to provide a name and password, type the name and password for an administrator user on this computer.

For Keychain Access to recognize a certificate file, it must have a file extension that identifies it as containing certificates.

The following types of certificates are recognized by Keychain:
■PKCS12 DER encoded - extension .p12 or .pfx
■PKCS7 DER or PEM encoded - extension .p7r .p7b .p7m .p7c, or .p7s

If Keychain Access is open, you can add a certificate by dragging the certificate onto the Keychain Access icon in the Dock.

You can also add a certificate to a keychain by choosing File > Import.

If you want an "official" answer, you'll need to contact Apple. This is a User to User forum.

Personal certificates are imported into keychain via the method I posted. Don't know why it does not work for you.

My question is where do you find the certificate to add to a keychain? I'm trying to add a keychain from our Exchange 2007 server to Entourage 2004 or 2008.

I keep getting a message that says "Unable to establish a secure connection to <exchange server> because the correct root certificate is not installed. If you continue, the information you view and send will not be secure."

I have located a webmail certificate but that doesn't seem to work.

Thanks

Hi

It's possible the X509 anchors are not selected in your Keychain list.

To check, open Keychain Access. Option/Command/L keys to open the Keychain list. If X509 Anchors is not on the list, click the +. Navigate as follows: HD>System>Library>Keychains. There, select X509 Anchors. In the Keychain list, click the share box. Close the list.

Now try to import the certificate again.

I do have X.509 running, but the certificate is for webmail. Our Exchange server is not configured to support Kerberos. I am using Safari 4.0.2 to get the webmail certificate. Not sure if the webmail certificate will work for Entourage 2008, 12.1.9

This is a school district and we have recently switched from Exchange 2003, which worked just fine for Macs, and gone to Exchange 2007. We have a wide array of Macs, ranging from slot drive iMacs to the latest models. We use mainly Entourage either 2004 or 2008. I am stumped at getting Exchange 2007 to work with our Macs.

Thanks