How to install Comodo email certificate?

Problem still present in macos 10.12

The thing is, I think it's a weird Comodo implementation. Upon importing the cert there is a Keychain error:

An error occurred. Unable to import the certificate. Error: -26276

Also for me there is no private key present which is why I assume Mail.app doesn't pick up the cert even though the cert is visible under Certificates.

There are three steps to using the certificate:

1. Make sure it is installed. Comodo sent you an email with buttons, links and password. I found the button didn't work, and you must use the hyperlink and the password to complete the installation.
2. Next, you must export the certificate. Using Firefox, go to Preferences - Advanced - View Certificates. There you will see the certificate from Comodo. Export it.
3. In Keychain, import it.

If you've used certificates previously, everything else remains the same in the Mail app.

I can't seem to get this to work either.

I downloaded an email certificate from Comodo. It saved as a .p7s file, which I double-clicked to install into keychain.

In keychain, I have an apple certificate with a private key for my apple ID, which is the same gmail address as the address I used for the comodo certificate.

However, there appear to be two separate certificates from comodo: one named for my gmail address, and one named "COMODO Client Authentication and Secure Email CA". These show up under "Certificates" but not under "My Certificates"...

When I launch Mail and check for TLS certificates in account preferences, I only see the apple ID one listed, not any of the ones from comodo...

Any idea what's going on here?

Thanks,

Trevor

I'm having the exact same issue.

I was fighting with this for hours last night but no matter what I did all I can see in mail is the cert related to my apple id.

Any help with this would be greatly appreciated!

I have the exact same issue with a Comodo issued certificate. Anyone managed to solve this?

Yes, the issue comes from the country.

When you submit a CERT request to Comodo make sure you select US or UK country, then the Cert will install automatically into your My Certificate.

If you put other country it might not work (most likely due to regulations)

I tried using the United States as the selected country, it made no difference, can still only see the apple certificate in "Mail" settings.

There is no place to "see" or "select" a s/MIME certificate in Mail. You can only select TLS certificate which has nothing to do with s/MIME.

for s/MIME the selection is automatic, when Mail finds a certificate that matches the email address that you defined in your Mail account settings then it offers you the possibility to Sign the message when writing a new mail from this mail address, and if you have the Cert of the recipient the encrypt icon is enabled.

Thanks xtof06! I was following a "how to" on installing an email certificate from comodo and it had a step to select the certificate in the TLS configuration of the associated email account in Mail. I see that step is not needed and Mail finds the certificate without configuration. Nice!

I have exactly the same issue. How did you solve it ?

Hi senseiwa, the difference is that I see the certificate under "certificates" but not "my certificates".

Where did you find these comodo steps ? I got my certificate from tbs-internet.com.

Ok this is solved. I took a certificate from Comodo website, opened it with "keychain", can see it under "My certificates", and my messages are signed.

Corican,

I have downloaded and installed the Comodo cert. It shows up in "My Certificates" but I don't have the option to encrypt or sign messages and I don't have it listed under TLS Certicates in my Mail Preferences. Can you describe exactly how you made this work?

This is what we follow at my firm. There are never any issues....

http://www.hoylen.com/articles/it/email/security/cert-comodo.html

http://www.hoylen.com/articles/it/email/security/firefox.html

http://www.hoylen.com/articles/it/email/security/mail.html