You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Install CA Certificate

Has anyone used ARD to push CA certificates to Keychains on remote machines?

MacBook Pro 16″, macOS 13.2

Posted on Apr 13, 2023 8:04 AM

Reply
Question marked as Top-ranking reply

Posted on Apr 14, 2023 8:03 AM

I did this some years ago for a local government's design studio. I Installed the certificate(s) on the admin Mac I was using at the time and then exported the ones I needed to deploy to the local /Users/Shared folder. Using ARD's Copy feature the certificate(s) were copied to the same location on all the target Macs. I chose /Users/Shared because all other accounts other than the admin one have read only access.


I used the following command (run as root):


security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /Users/Shared/NAMEOFYOURCERTIFICATE.cer


I had multiple certificates to install at the time and I just amended the command to accommodate them all as necessary. I even created a bash script to do I needed to do in one step. This was done when High Sierra changed to Mojave. As I recall it worked as intended.


Since then Apple have changed things (eg: default shell is now zsh etc) and I've not had chance to use it again so I don't know if it will work now as it used to but I don't see why not? As ever test and amend/adjust if necessary.


AFAIK the 'security' command line has not been deprecated as you can still call up its manual page in Terminal (I'm on Catalina - can't comment on any later OS) which in itself is not a guarantee that it hasn't been.


Good luck.

1 reply
Question marked as Top-ranking reply

Apr 14, 2023 8:03 AM in response to DOLAdmin

I did this some years ago for a local government's design studio. I Installed the certificate(s) on the admin Mac I was using at the time and then exported the ones I needed to deploy to the local /Users/Shared folder. Using ARD's Copy feature the certificate(s) were copied to the same location on all the target Macs. I chose /Users/Shared because all other accounts other than the admin one have read only access.


I used the following command (run as root):


security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /Users/Shared/NAMEOFYOURCERTIFICATE.cer


I had multiple certificates to install at the time and I just amended the command to accommodate them all as necessary. I even created a bash script to do I needed to do in one step. This was done when High Sierra changed to Mojave. As I recall it worked as intended.


Since then Apple have changed things (eg: default shell is now zsh etc) and I've not had chance to use it again so I don't know if it will work now as it used to but I don't see why not? As ever test and amend/adjust if necessary.


AFAIK the 'security' command line has not been deprecated as you can still call up its manual page in Terminal (I'm on Catalina - can't comment on any later OS) which in itself is not a guarantee that it hasn't been.


Good luck.

Install CA Certificate

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.