Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Error: 10013 Trying to install X509Anchors Certificate

I'm trying to install two certificates in the X509Anchors keychain. Per an archived discussion, I've tried unlocking the keychain as well as giving myself full read/write permissions to /System/Library/Keychains/X509Anchors. No matter what, I get "An error occurred. Unable to import "filename". Error: 100013."

These same certs work fine on my Intel iMac running OS 10.5.8.

2.4 GHz Intel Core 2 Duo MacBook Pro, Mac OS X (10.6.3)

Posted on Jul 19, 2010 11:29 AM

Reply
13 replies

Sep 30, 2010 12:18 PM in response to Holly Anne Balish

Great news!

I imported my company's root and LCS cert into the "Systems Root" in Keychain, opened Communicator from Mac Office 2011 and I logged in successfully.

It appears, once Office 2011 is available to general public (which I believe is Oct. 26th), that Messenger 8 and Communicator are separated into separate apps, and the communicator app no longer relies on the X509 anchor.

Nov 29, 2010 1:38 PM in response to eloscurosecreto

When I try to drag the certs from login keychain to system roots i get an error saying:

"The “System Roots” keychain cannot be modified. To change whether a root certificate is trusted, open it in Keychain Access and modify its Trust Settings. New root certificates should be added to the login keychain for the current user, or to the System keychain if they are to be shared by all users of this machine."

How did you install your certs to "system root" ?

Dec 7, 2010 5:59 AM in response to slacka

How do you know which certificate is the correct one?

I have Communicator installed on an XP machine and can access maybe can export certificates from there. Will it be a Microsoft certificate?

If I need to export from XP there are several different formats. Which one would I need for Snow Leopard? DER encoded binary X.509? Base-64 encoded X.509? Crytpograhic Message Syntax Standard - PKCS #7?

Thanks for any assistance.

Dec 18, 2010 11:08 PM in response to slacka

Hi,

After a bit of Research I found out how to import root certificates into *Keycahin Acess*. It seems Keychain is not designed to be easily import root certificates, so you have to do this the hard way. Here is what I did:

0. before doing anything you might wanna backup your original Root Certificates. It is located in /System/Library/Keychains/ make sure to keep a copy of the original files just in case.
1. obtain the root certificate file and save it to your Desktop. (it is usually somefilename.crt)
2. Open up Terminal and Type the following:
$ cd ~/Desktop
$ cp /System/Library/Keychains/SystemRootCertificates.keychain ~/Library/Keychains/
$ certtool i <certificate file name that you have saved on your Desktop> k=SystemRootCertificates.keychain
$ sudo cp ~/Library/Keychains/SystemRootCertificate.keychain /System/Library/Keychains/
<Enter your Administrator password>
3. You can open up Keychain Acess now and look for the certificate in System Roots, double click on it and change the Trust to Always trust to accept the certificate. and that's all.

Message was edited by: ilgaar

Feb 14, 2011 9:28 AM in response to Austin_Helps

I'm with you, Austin. I've got a Windows 7 machine sitting here, and I can see certificates at Start >> Control Panels >> Internet Properties >> Content tab >> Certificates button. I can see lots of certificates under the Intermediate Certification Authorities tab and the Trusted Root Certification Authorities tab, but I can't tell which one(s) to export.

Feb 17, 2011 5:30 AM in response to Holly Anne Balish

I too was having this problem. I had been trying to import the certificates into the "user" keychain and that was probably part of my problem.

I didn't find this thread until after I fixed my problem. Just to share with you, I fixed my Communicator connection blues by setting up my email address in Microsoft Outlook (Office 2011 for Mac). After I did this, I went back to Communicator and it connected (I was trying to use the same account in Communicator). Makes me believe that Outlook does the certificate importing for us… I don't use Outlook at all (Mail.app is so snappy), but it helped get Communicator running.

Error: 10013 Trying to install X509Anchors Certificate

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.