Safari on Mac OS 10.4 - Resolve Certificate Issues to Access SAPweb

This page will guide you through resolving certificate issues in Safari on Mac OS X 10.4, in order to access SAPweb.

Delete Duplicate or Expired Certificates

1. Navigate, in Finder, to Applications >> Utilities >> Keychain Access.
   
2. Select the login keychain and then select My Certificates from the second bottom list. If you do not have a bottom list with All Items, Certificates, Passwords..., press the button titled Show Keychains in the bottom left of the Keychain Access window. Your window should look like the image below:
   
   
   
3. Select any expired or extra certificate and press the delete key on your keyboard.
4. When prompted to confirm deletion of the certificate, click Delete.
   
   
   

Obtain an MIT Personal Certificate

1. Navigate, in Safari, to https://ca.mit.edu/ca.
2. Enter your credentials and click Next.
   
   
   
3. On the page Generate a Private Key, leave the Key Size at the highest grade for your browser.
   The Certificate Lifetime gives the default number of days until this personal certificate expires.
   Click Next to accept the defaults.
   
   
   Result: A confirmation page indicates that the certificate has been installed.
   

Clear the browser cache

1. Follow the menu path Safari > Empty Cache.
   
   
   
   
2. In the confirmation window, click Empty.
   
   
   
   
3. Follow the menu path Safari > Quit Safari.
   
   
   
   

You should now be able to re-launch Safari and access SAPweb.
If you continue to receive an error, please contact the IS&T Help Desk, at computing-help@mit.edu, and let us know your operating system, web browser, and the exact text of the error message you are receiving.

Install the MIT CA (Certificate Authority)

NOTE: The MIT CA (Certificate Authority) is not needed for SAPweb. Since other MIT websites require it, however, it may be useful to take a moment to install it now.

1. Navigate, in Safari, to: MIT CA
   Alternatively, paste the following URL into Safari: http://ca.mit.edu/mitca.crt.
   Result: This downloads the file "mitca.crt" to Safari's download folder, which by default is the Desktop.(unless you specified another default location).
2. Navigate in the Finder to the Downloads folder and double-click mitca.crt.
   
   
   Result: Keychain Access opens and prompts for where to store the certificate.
3. Select x509 Anchors and press OK
   
   
   
   
4. When prompted, enter the login password for your computer. You will need administrator rights.
   
   
   The following error message indicates that you do not have administrator rights.
   
   
   
   
5. To check that the certificate was installed and that the trust settings were properly set, select the X509 Anchors keychain in the top list on the column to the left of the window, and then select Certificates in the bottom list on the column to the left of the window.
   
   Scroll down until you see "MIT Certification Authority" and have a green circle with a white check.
   
   
   
   If you see more than one listed, delete the duplicates.

Still need help? Use the Certificates Help Wizard.