WSS Admin Guide

Installing SSL Certificates for Mac OS

Follow this procedure to install an SSL certificate on Mac OS X.

The SSL certificate is required in order for SSL Inspection (Enable SSL) to work on Proxy/DWP. Without certificates, users will not be able to proceed to secured (https) websites or proxy will not be able to provide features such as scan ahead, safe search, web filtering, etc.

We recommend that you set up your system and all of your users with trust certificates. Browsers that use system network settings such as Safari or Chrome, as well as any applications that utilize secured connection, will use the certificates for SSL Inspection.

Note: Firefox uses its own network settings, so you must install certificates separately through Firefox. The install procedures are same as Windows. During installation procedure, you will be asked to use application called Keychain Access. Make sure to select System in Keychains. Otherwise, the certificates will be trusted for only one user. In order to solve this, you need to remove certificates and install in System again.

To install an SSL certificate for Mac OS:

• In a browser, enter the following URL:
  https://weblogin.webroot.com/
• Log in with your user name and password.
  The system displays the Home tab.

• From the Help drop-down menu, select Downloads.


The Downloads page displays.



Click Webroot SSL Certificates to download the certificates.



The system downloads the Webrootcerts.zip file; it should contain three files as shown below.


• Do either of the following:
  • Click Spotlight Search.
  • Click the Magnifier icon on right top corner of the screen.
• In the field, enter Keychain Access and press Enter.


The system displays the Keychain Access window.


• Ensure that you are the System session.

• From the Category drop-down menu, select Certificates.

• Select ca.live.crt and ia.live.crt and drag into Keychain Access.


The Add Certificates window displays.


• Click the Add button.
  The system adds two new certificates to the list.

• Double-click on Webroot Secure Signing Service.
  The system displays the Webroot Secure Signing Service window.

• Click Trust.


The following list displays.


• From the When using this certificate drop-down menu, select Always Trust.


The list now looks as follows.


• Close the window.
• The system prompts you to enter your password to allow changes.

• Click the OK button.
  The system will trust the certificate.
• Make sure that it says, This certificate is marked as trusted for all users; if not, make sure certificate is installed in System keychain.
  They must be installed only in System keychain. You might have to delete the certificate from keychains other than System.

• Please repeat the same steps for the Webroot Web Security Service certificate.