IU 13 Staff Development Student Programs Adult Education Business Services Resources and Links Technology and Media Services Human Resources Services
-
News and Announcements Our Organization What We Do Building/Staff Directory Maps and Directions Publications School Districts Employee Login

 

IU 13 Security Certificate Installation

Server Certificates

Lancaster-Lebanon Intermediate Unit 13 and member school districts may use Lancaster-Lebanon Intermediate Unit 13-issued certificates on their servers.  If the CA (Certification Authority) Server certificate is not installed in your web browser, you may receive security warning messages.

Depending on your operating system and browser settings, you may see this message every time you access the server.  Downloading and installing the CA certificate in your browser will help you avoid these recurring messages from appearing.

If you have reached these instructions while attempting to access a secure web site, you may try accessing the site by replacing the "http" portion of the website with "https". For example, to reach IU 13 Webmail, type https://webmail.iu13.org (or click the preceeding link).

Downloading the Lancaster-Lebanon Intermediate Unit 13 Certificate
You will need to complete the following steps for each browser you use on your computer AND for each location you use a computer (i.e. if you use one at school and at home).  In some cases, your technology department or someone else may already have installed the CA certificate on your computer.

IMPORTANT NOTE FOR MACINTOSH INTERNET EXPLORER USERS ONLY

Internet Explorer will prompt you to set up a password for your certificate.   Do not enter a password at this prompt - leave the fields blank. In the future, when you initiate a secure connection with your browser and are prompted for your certificate password, simply hit return.
In addition, for Macintosh OS 8 or OS 9 users only, you must be running Internet Explorer 5.1 or later. Macintosh IE 4.5 or 5.0 are not supported. If you are using an older version of IE on your Macintosh, download a newer version from Microsoft. Be sure to download the copy that is "For Mac OS 8.1 to 9.x".

For installation instructions, please select from the following.

Direct link to download the Lancaster-Lebanon Intermediate Unit 13 Certificate.
Downloading and Installing Server Certificates on Windows using Internet Explorer

Complete the following steps to download and install the CA Server certificate on Windows using Internet Explorer:

  1. Click on the LLIU Certificate link to being the download process.
  2. The File Download windows is displayed.
    3. Windows IE Open Dialog Box
  3. Click Open to save and install the file.  The Certificate window is displayed.
    4. Windows IE Certificate window
  4. Click Install Certificate...
  5. The Certificate Import Wizard will appear.  Follow the steps in the Wizard, accepting defaults where prompted.
  6. Click Finish to exit the Wizard and choose OK twice to dismiss the Import Successful message and the Certificate dialog box.
The installation of the CA Server certificate is complete.

Downloading and Installing Server Certificates on Windows or Macintosh using Mozilla/Netscape

Complete the following steps to download and install the CA Server certificate on Windows or Macintosh using Mozilla/Netscape:

  1. Click on the LLIU Certificates link to begin the download process.
  2. The Downloading Certificate window is displayed.
    3. Macintosh/Windows CA Confirmation screen
  3. Check all of the checkboxes and click OK.
The installation of the CA Server certificate is complete.

Downloading and Installing Server Certificates on a Macintosh using Internet Explorer
Important Note for Macintosh Internet Explorer users:  Internet Explorer will prompt you to setup a password for your certificate.  You should leave this field blank.  You will be prompted to enter a password the first time you make an authenticated connection with your browser - if you leave it blank, you will only need to hit return.

Complete the following steps to download and install the CA Server certificates using Internet Explorer:

  1. Click on the LLIU Certificates link to begin the download process.
  2. The following window is displayed.
    3. Macintosh IE verification screen
  3. Click View Certificate Authority.
    4. Macintosh IE verification screen
  4. In the next window, check the I have verified that the Certificate is not a forgery and I trust the Issuer to verify Internet security options and click Accept.  If this is the first time you are installing a certificate, you will be prompted to define a certificate password.  We recommend leaving this blank (i.e. do not enter a password).  This password will be needed the first time you connect to a secure web site - if you leave it blank, you will only need to hit the return key to dismiss the prompt.
    5. Macintosh IE certificate password screen
  5. Click OK.  You will be prompted to confirm the password.  Leave it blank and click OK to continue.
  6. In the next window, enter your certificate password.  Do not enter anything, but leave it blank and click OK.
  7. The next window will confirm that the Certificate Authority has been added successfully.  Click OK.
The installation of the CA Server certificate is complete.

Downloading and Installing Server Certificates on a Macintosh (OS X only) using Safari
Complete the following steps to download and install the CA Server certificates using Safari.

Apple's Safari Web Browser uses Apple's KeyChain technology for managing SSL certificates.  Therefore, it is necessary to import the LLIU CA certificate into the System's KeyChain.

Recommended method (GUI-based):

  1. Download the CerttoolGUI application.
  2. If the DiskImage does not automatically mount, double-click it to mount the disk.
  3. Use this link to download the LLIU CA Certificate and save it on your desktop.
  4. Drag the LLIU-CA-Server-x509.der file onto the CerttoolGUI application.  The certificate should be listed in the Certificates to import listing.
  5. Click the Import certificates button.  You will be prompted for an administrative password.  Enter it and click OK.  The Certificates to import listing should now have a Successful state for the LLIU CA Server 1 certificate.
Alternate method (command-line based):

This method assumes you are using an account that has Administrative persmissions on the OS X computer. You may need to execute the commands using the "sudo" command as well.
  1. Open the Terminal.app located in the Utilities folder.
  2. Make a copy of the System's X509Anchors database in case you mess something up by executing the following command:
    3.   cp /System/Library/Keychains/X509Anchors /System/Library/Keychains/X509Anchors.copy
  3. Copy the System's X509Anchors database to your local Keychains directory by executing the following command:
    4.   cp /System/Library/Keychains/X509Anchors ~/Library/Keychains
  4. Use this link to download the LLIU CA Certificate and save it on your desktop.
  5. Run the certtool and import the file that you just downloaded by executing the following command:
    6.   certtool i ~/Desktop/LLIU-CA-Server-x509.der k=X509Anchors d
  6. Move your local X509Anchors file back to the System's Keychains folder by executing the following command:
    7.   mv ~/Library/Keychains/X509Anchors /System/Library/Keychains/X509Anchors
Lancaster-Lebanon Intermediate Unit 13 - Technology Services
Email ca@iu13.org with questions or problems

Contact the webmaster for more information. This page was last modified on Thursday, August 28, 2003. ©2008 Lancaster-Lebanon IU 13. All Rights Reserved.