Cisco Cisco NAC Appliance 4.1.0
11-19
Cisco NAC Appliance - Clean Access Manager Installation and Administration Guide
OL-12214-01
Chapter 11 Distributing the Clean Access Agent
Configuring Agent Distribution/Installation
Installing the Root Certificate for Mac OS 10.2.x
Use the following steps to import a root or CA certificate on a Macintosh running Mac OS X 10.2.
Note
You must have administrative permissions on your computer in order to run these steps.
Step 1
Download the root certificate to your client machine (or desktop). See
for details.
Step 2
Make sure that the certificate is in privacy enhanced mail (PEM) format.
Note
If the certificate is not in PEM format, you can use Microsoft Certificate Manager in the Office
folder to change formats. Import the certificate, then use the PEM format to save the certificate.
folder to change formats. Import the certificate, then use the PEM format to save the certificate.
Step 3
Click the Finder icon in the Dock. From the Go menu, choose Applications.
Step 4
Open the Utilities folder.
Step 5
Double-click the Terminal program.
Step 6
Type the following commands, and press the Enter key after each line. Replace cert_filename with the
actual file name of your certificate.
actual file name of your certificate.
cd ~/Desktop
cp /System/Library/Keychains/X509Anchors ~/Library/Keychains
certtool i cert_filename k=X509Anchors
sudo cp ~/Library/Keychains/X509Anchors /System/Library/Keychains
Step 7
You must enter an administrative password after you press Enter for the last Terminal command.
Figure 11-6
Installing Root Certificate on Mac OS 10.2
Note
The 10.2 certtool cannot import a certificate into any keychain that does not reside in your
~/Library/Keychains directory. The method outlined here resolves this issue by copying the
X509Anchors to ~/Library/Keychains, performing “certoool i” there, and then (as root) copying the
resulting X509Anchors back to /System/Library/Keychains/. For additional reference information for
importing the root certificate on Mac OS 10.2.x, see also:
~/Library/Keychains directory. The method outlined here resolves this issue by copying the
X509Anchors to ~/Library/Keychains, performing “certoool i” there, and then (as root) copying the
resulting X509Anchors back to /System/Library/Keychains/. For additional reference information for
importing the root certificate on Mac OS 10.2.x, see also:
and