AddingUMIACSCertificateAuthority - Revision history

Mbaney at 19:52, 24 April 2026

2026-04-24T19:52:50Z

← Older revision		Revision as of 19:52, 24 April 2026
Line 1:		Line 1:
	===Introduction===		===Introduction===

	When you visit webpages encrypted with SSL, you may be presented with a warning about the site's security certificate not being trusted. These are normally important screens to pay attention to on the internet as a whole and UMIACS goes to great lengths to maintain a secure environment for our users. ~~However~~, ~~it is not cost effective~~ to ~~provide commercial certs for all our public facing certificates~~. ~~In order~~ to ~~keep costs down we provide a UMIACS~~ CA (certificate ~~authority) that enables your web browser to trust our secure webpages. The following~~ steps ~~explain how~~ to import ~~this certificate~~ based on your preferred web browser.		When you visit webpages encrypted with SSL, you may be presented with a warning about the site's security certificate not being trusted. These are normally important screens to pay attention to on the internet as a whole and UMIACS goes to great lengths to maintain a secure environment for our users. There are rare times where we may use our own internal certificate authority (CA) instead of a third-party one with wider trust to issue a site's certificate, to keep costs down. If you want to add this CA's root certificate ahead of time, follow these steps to import it based on your preferred web browser.

	===Windows===		===Windows===

Arianneg: /* Safari and Google Chrome (macOS) */

2026-03-30T20:37:39Z

Safari and Google Chrome (macOS)

← Older revision		Revision as of 20:37, 30 March 2026
Line 32:		Line 32:
	[[Image:KeychainAcces1.png\|500px\|alt=Screenshot of MacOS menu displaying the dialog box requiring authentication]]		[[Image:KeychainAcces1.png\|500px\|alt=Screenshot of MacOS menu displaying the dialog box requiring authentication]]
	* Right-click the certificate that was just added and select the "Get Info" section.		* Right-click the certificate that was just added and select the "Get Info" section.
	[[Image:KeychainAccess2.png\|500px\|alt=Screenshot of MacOS showing the results of right clicking the certificate]		[[Image:KeychainAccess2.png\|500px\|alt=Screenshot of MacOS showing the results of right clicking the certificate]]
	* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")		* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")
	* Close the certificate and keychain access window.		* Close the certificate and keychain access window.

Arianneg: /* Safari and Google Chrome (macOS) */

2026-03-30T20:36:56Z

Safari and Google Chrome (macOS)

← Older revision		Revision as of 20:36, 30 March 2026
Line 30:		Line 30:
	* Open the UMIACS Certificate Authority file by double-clicking it (should be located in your downloads folder).		* Open the UMIACS Certificate Authority file by double-clicking it (should be located in your downloads folder).
	* Enter your administrator password or use your fingerprint on the dialog box that appears.		* Enter your administrator password or use your fingerprint on the dialog box that appears.
	[[Image:KeychainAcces1.png\|500px]]		[[Image:KeychainAcces1.png\|500px\|alt=Screenshot of MacOS menu displaying the dialog box requiring authentication]]
	* Right-click the certificate that was just added and select the "Get Info" section.		* Right-click the certificate that was just added and select the "Get Info" section.
	[[Image:KeychainAccess2.png\|500px]]		[[Image:KeychainAccess2.png\|500px\|alt=Screenshot of MacOS showing the results of right clicking the certificate]
	* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")		* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")
	* Close the certificate and keychain access window.		* Close the certificate and keychain access window.
	* Enter the administrator credentials to add this certificate for all users of the system		* Enter the administrator credentials to add this certificate for all users of the system
	[[Image:KeychainAccess3.png\|500px]]		[[Image:KeychainAccess3.png\|500px\|alt=Screenshot of MacOS menu to enter administrator credentials]]
	* You may need to restart your browser for the change to take effect.		* You may need to restart your browser for the change to take effect.

Arianneg: /* Windows */

2026-03-26T20:43:27Z

Windows

Osalami: /* Safari and Google Chrome (macOS) */

2024-01-08T15:57:12Z

Safari and Google Chrome (macOS)

← Older revision		Revision as of 15:57, 8 January 2024
Line 26:		Line 26:

	* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.		* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
	* Open ~~this~~ file by double-clicking it.		* Open Keychain Access (Located in the Others group in Launchpad)
	* ~~The previous step will add~~ the certificate ~~for your own account, but it will not be trusted by macOS itself~~. ~~If you have administrative access on your Mac, choose Always Trust:<br />~~[[Image:~~UMIACSCA_2~~.png\|500px]]		* Go to the Systems > Certificates
	* Enter the administrator credentials to add this certificate for all users of the system~~:<br />~~[[Image:~~UMIACSCA_3~~.png\|500px]]		* Open the UMIACS Certificate Authority file by double-clicking it (should be located in your downloads folder).
	* Close the keychain access window.		* Enter your administrator password or use your fingerprint on the dialog box that appears.
			[[Image:KeychainAcces1.png\|500px]]
			* Right-click the certificate that was just added and select the "Get Info" section.
			[[Image:KeychainAccess2.png\|500px]]
			* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")
			* Close the certificate and keychain access window.
			* Enter the administrator credentials to add this certificate for all users of the system
			[[Image:KeychainAccess3.png\|500px]]
	* You may need to restart your browser for the change to take effect.		* You may need to restart your browser for the change to take effect.

Mbaney at 14:09, 23 April 2020

2020-04-23T14:09:22Z

← Older revision		Revision as of 14:09, 23 April 2020
Line 7:		Line 7:
	For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:		For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:

	*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.		* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
	*Open the file and click "Install Certificate"		* Open the file and click "Install Certificate".
	[[File:UMIACSCA1.png]]		*; [[File:UMIACSCA1.png]]
	*In the dialog box opened, click "~~next~~"		* In the dialog box opened, click "Next".
	*Choose "Place all certificates in the following store"		* Choose "Place all certificates in the following store".
	*Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".		* Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".
	[[File:UMIACSCA2.png]]		*; [[File:UMIACSCA2.png]]
	*Click "Next" and then "Finish"		* Click "Next" and then "Finish".
	*If you get a Security Warning asking if you want to install this certificate, click "Yes".		* If you get a Security Warning asking if you want to install this certificate, click "Yes".
	[[File:UMIACSCA3.png]]		*; [[File:UMIACSCA3.png]]
	*You should ~~Receive~~ a success message similar to the following:		* You should receive a success message similar to the following:
	[[File:UMIACSCA4.png]]		*; [[File:UMIACSCA4.png]]
	*You may need to restart your browser for the change to take effect.		* You may need to restart your browser for the change to take effect.

	===Safari and Google Chrome (~~Mac~~ macOS)===		===Safari and Google Chrome (macOS)===

	For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:		For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:

	*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority]] to download the file.		* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
	*Open this file by double-clicking it		* Open this file by double-clicking it.
	* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]		* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]
	* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]		* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]

Hiteesh at 20:13, 21 April 2020

2020-04-21T20:13:53Z

← Older revision		Revision as of 20:13, 21 April 2020
Line 7:		Line 7:
	For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:		For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:

	*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS ~~CA Root~~ Certificate] to download the file.		*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
	*Open the file and click "Install Certificate"		*Open the file and click "Install Certificate"
	[[File:UMIACSCA1.png]]		[[File:UMIACSCA1.png]]
Line 25:		Line 25:
	For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:		For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:

	*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS ~~CA Root~~ Certificate] to download the file.		*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority]] to download the file.
	*Open this file by double-clicking it		*Open this file by double-clicking it
	* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]		* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]

Hiteesh: /* Safari and Google Chrome (Mac macOS) */

2020-04-20T20:02:46Z

Safari and Google Chrome (Mac macOS)

← Older revision		Revision as of 20:02, 20 April 2020
Line 26:		Line 26:

	*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS CA Root Certificate] to download the file.		*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS CA Root Certificate] to download the file.
	*~~open~~ this file by double-clicking it		*Open this file by double-clicking it
	* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]		* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]
	* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]		* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]

Hiteesh at 20:02, 20 April 2020

2020-04-20T20:02:31Z

← Older revision		Revision as of 20:02, 20 April 2020
Line 25:		Line 25:
	For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:		For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk\|Staff]]. Otherwise, here are the steps required to accept the certificate:

	* ~~Visit http~~://~~intranet~~.umiacs.umd.edu		*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS CA Root Certificate] to download the file.
	* Scroll to the bottom and click "UMIACS CA Root Certificate ~~(CRT - Most Browsers)"~~. ~~Download and~~ open this file by double-clicking it~~<br />[[Image:UMIACSCA_1.png\|500px]]~~		*open this file by double-clicking it
	* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]		* The previous step will add the certificate for your own account, but it will not be trusted by macOS itself. If you have administrative access on your Mac, choose Always Trust:<br />[[Image:UMIACSCA_2.png\|500px]]
	* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]		* Enter the administrator credentials to add this certificate for all users of the system:<br />[[Image:UMIACSCA_3.png\|500px]]

Hiteesh at 19:56, 20 April 2020

2020-04-20T19:56:32Z

← Older revision		Revision as of 19:56, 20 April 2020
Line 4:		Line 4:

	===Windows===		===Windows===
	~~Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt CA-RooT.crt]~~

	~~===Mozilla~~ Firefox ~~(cross-platform~~)~~===~~		For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:

	~~Mozilla Firefox contains its own method of managing certificate authorities independent of your operating system. These are the steps required if you are using Firefox:~~		*Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS CA Root Certificate] to download the file.
			*Open the file and click "Install Certificate"
	* ~~Visit http~~://~~intranet~~.umiacs.umd.edu		[[File:UMIACSCA1.png]]
	* Scroll to the bottom and click "UMIACS CA Root Certificate ~~(CRT - Most Browsers)". <br />[[Image:UMIACSCA_IE_1.png~~]]<br />Firefox should open a "Downloading Certificate" dialog box automatically. It may look slightly different depending on your operating system or version of Firefox:<br />[[Image:UMIACSCA_Firefox_1.png\|458px]]		*In the dialog box opened, click "next"
	* Check all three boxes indicating that you fully trust this certificate authority		*Choose "Place all certificates in the following store"
	* Click ok.		*Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".
	* You may need to ~~restart your browser for~~ the ~~change to take effect.~~		[[File:UMIACSCA2.png]]
			*Click "Next" and then "Finish"
	~~===Internet Explorer and Google Chrome (Windows)===~~		*If you get a Security Warning asking if you want to install this certificate, click "Yes".
			[[File:UMIACSCA3.png]]
	~~For most Windows browsers (excluding Firefox), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:~~		*You should Receive a success message similar to the following:
			[[File:UMIACSCA4.png]]
	* Visit http://intranet.umiacs.umd.~~edu~~		*You may need to restart your browser for the change to take effect.
	* ~~Scroll to~~ the ~~bottom~~ and click "~~UMIACS CA Root~~ Certificate ~~(CRT - Most Browsers)~~"~~. Download and open this file<br />~~[[~~Image~~:~~UMIACSCA_IE_1~~.png~~\|border~~]]
	* ~~Click "Install Certificate..." towards the bottom of~~ the dialog box~~<br />[[Image:UMIACSCA_IE_2.png\|376px]]~~
	* Click Next
	* Choose "Place all certificates in the following store"
	* Choose "Trusted Root Certification Authorities" and click ~~ok<br />~~[[~~Image~~:~~UMIACSCA_IE_3~~.png~~\|644px~~]]
	* Click ~~next~~ and then ~~finished~~. You should ~~receive~~ a success message similar to the following:~~<br />~~[[~~Image~~:~~UMIACSCA_IE_4~~.png~~\|200px~~]]
	* You may need to restart your browser for the change to take effect.

	===Safari and Google Chrome (Mac macOS)===		===Safari and Google Chrome (Mac macOS)===

← Older revision		Revision as of 20:43, 26 March 2026
Line 9:		Line 9:
	* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.		* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
	* Open the file and click "Install Certificate".		* Open the file and click "Install Certificate".
	*; [[File:UMIACSCA1.png]]		*; [[File:UMIACSCA1.png\|alt=Screenshot of Windows menu highlighting the "Install Certificate" button]]]
	* In the dialog box opened, click "Next".		* In the dialog box opened, click "Next".
	* Choose "Place all certificates in the following store".		* Choose "Place all certificates in the following store".
	* Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".		* Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".
	*; [[File:UMIACSCA2.png]]		*; [[File:UMIACSCA2.png\|alt=Screenshot of Windows highlighting indicated fields in instructions]]]
	* Click "Next" and then "Finish".		* Click "Next" and then "Finish".
	* If you get a Security Warning asking if you want to install this certificate, click "Yes".		* If you get a Security Warning asking if you want to install this certificate, click "Yes".
	*; [[File:UMIACSCA3.png]]		*; [[File:UMIACSCA3.png\|alt=Screenshot of Windows highlighting indicated fields in instructions]]]
	* You should receive a success message similar to the following:		* You should receive a success message similar to the following:
	*; [[File:UMIACSCA4.png]]		*; [[File:UMIACSCA4.png\|alt=Screenshot of expected success message in Windows]]
	* You may need to restart your browser for the change to take effect.		* You may need to restart your browser for the change to take effect.