Push system certificates to keychain via Apple Remote Desktop?

Question

Level 2

431 points

Push system certificates to keychain via Apple Remote Desktop?

Anyone know how to load certificates into a computer keychain via ARD?

It would be great for this self signed one that I have.

Many thanks,

David Lee

All Apple Macs, Mac OS X (10.5.6)

Posted on Feb 20, 2010 6:20 AM

Reply

Answer 1

Best reply

Templeton Peck

Level 9

62,197 points

Jan 5, 2011 11:58 AM in response to David Lee

My experience has been, you'd need to push the cert file out, and then run the certtool command:

http://developer.apple.com/Mac/library/documentation/Darwin/Reference/ManPages/m an1/certtool.1.html

Reply

Answer 2

David Lee Author

Level 2

431 points

Jan 5, 2011 11:58 AM in response to Templeton Peck

Nice one,

That looks promising.

Thanks,

David

Reply

Answer 3

Jan 5, 2011 11:59 AM in response to David Lee

I have done this successfully
first copy your cert to the root drive of each mac with ard
then use this command from ard
certtool i /Cert.crt k=/Library/Keychains/System.keychain

At this point the cert is installed, but not trusted, on your test mac, install the cert and apply the trust settings.
This file is located /Library/Security/Trust Settings/Admin.plist
Copy this file to each mac with ard inheriting permissions to the same location, reboot all mac's and trust settings are now applied.

Reply