How to install a trusted root CA certificate and an intermediate CA certificate on a computer that is running Microsoft Entourage 2004 for Mac on a Mac OS X 10.3 or a Mac OS X 10.2 operating system

This article describes how to install a trusted root certification authority (CA) certificate and an intermediate CA certificate on a computer that is running Microsoft Entourage 2004 for Mac on one of the following operating systems:

• The Mac OS X 10.3 operating system.
• The Mac OS X 10.2 operating system.

Note You must have administrative permissions on your computer to be able to use the methods that are outlined in this article.

To complete the certificate installation, you will need access to the certificate file. You can obtain the needed certificate file by using any one of the following methods:

• Copy the file to the local workstation by using removable storage media.
• Copy the file from a network share location.
• Download the file from the Web URL that is assigned in the Authority Information Access extension of the certificate or from the enrollment page for your CA certificate.

Install the certificate

To install the certificate, you must use the Keychain Access program. To start the Keychain Access program, double-click the certificate file. The Keychain Access program will automatically load, and it will display the Add Certificates dialog box.

• To install a trusted root CA certificate, follow these steps:
  1. Click the Keychain menu, click X509 Anchors, and then click OK.
  2. You will be prompted to authenticate through Keychain Access. Type your password, and then click OK.
     
     Note If X509 Anchors is not available in the Keychain menu, the certificate that you have opened is not a trusted root CA certificate. The most common file name extensions for this kind of certificate are .cer and .crt.
• To install an intermediate CA certificate, follow these steps:
  1. Click the Keychain menu, click Microsoft_Intermediate_Certificates, and then click OK.

Verify the certificate installation

To verify that the certificate is installed and that it is ready for use by Entourage 2004 for Mac, use the Microsoft Certificate Manager. To do this, follow these steps:

1. On the Go menu in Finder, click Applications.
2. Open the Office 2004 folder, and then open the Office folder.
3. Double-click Microsoft Cert Manager.
4. On the Look for certificates of type menu, select one of the following options:
   • Click the Apple Trusted Root Certificate Authorities option for an installed root CA certificate.
   • Click the Intermediate Certificate Authorities option for an installed intermediate CA certificate.

Verify that the newly installed certificate is in the appropriate certificate list. After you verify the location of the certificate, Entourage 2004 for Mac is ready to use the certificate for Secure Sockets Layer (SSL) communications.

Personal certificates for sending digitally signed and encrypted messages

Personal certificates that are obtained from a certification authority are installed into Microsoft_Entity_Certificates by using the steps that were discussed earlier in this article.

Setting up digital IDs in Entourage 2004 for Mac

After the certificates are installed, you are ready to set up Entourage 2004 for Mac to use digital IDs. To do this, follow these steps:

1. Start Entourage 2004 for Mac.
2. On the Entourage menu, click Account Settings.
3. Double-click the account that you want to set up for signing and encrypting mail.
4. Click the Security tab.
5. Click Select under Signing Certificate, click the digital ID or the certificate that you want to use, and then click Choose.
   
   Note The list will contain all the personal certificates that you imported into your personal keychain.
6. Repeat step 5 to select an encryption certificate.
7. Select any options that you want. Typically, the default settings are what you would want to use.
8. Click OK.

Mac OS X 10.2

Follow these steps when you import a certificate on a Macintosh computer that is running Mac OS X 10.2.

Note You must have administrative permissions on your computer to be able to follow these steps.

1. Download the certificate to your desktop.
2. Make sure that the certificate is in privacy enhanced mail (PEM) format.
   
   Note If the certificate is not in PEM format, use the Microsoft Certificate Manager in the Office folder to change formats. Import the certificate and then use the PEM format when you save the certificate.
3. Click Applications on the Go menu, open the Utilities folder, and then double-click the Terminal program.
4. Type the following commands, and press the ENTER key after each line.
   Replace cert_filename with the actual file name of your certificate.

   cd ~/Desktop
   cp /System/Library/Keychains/X509Anchors ~/Library/Keychains
   certtool i cert_filename k=X509Anchors
   sudo cp ~/Library/Keychains/X509Anchors /System/Library/Keychains

   Note You must enter an administrative password after you press ENTER for the last Terminal command.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.