No valid certificate on Mac OS keychain

[BobWhite]

Version: 2008 Operating System: Mac OS X 10.6 (Snow Leopard) Processor: Intel Email Client: Exchange I've looked through all the threads I've been able to find about certificates, but haven't found an answer to this one. Using Entourage 2008, and Snow Leopard 10.6, both fully up to date. I've installed security certificates for my account, and the Keychain Access shows all certificates are valid. I ran Keychain First Aid anyway, and so no problems.

But when I configure my Entourage account and try to set the client certificate, I get the error that no valid certificates were found in the OS keychain. How does one fix this?

BTW - this is the fourth Mac I've configured in the last few months, and the first I've had trouble with.

 

[Corentin Cras-Méneur]

But when I configure my Entourage account and try to set the client
certificate, I get the error that no valid certificates were found in
the OS keychain. How does one fix this?

Are you sure the certificates are in the login keychain?? Not in any of
the other keychains?

Corentin

 

[BobWhite]

>
>
> Are you sure the certificates are in the login keychain?? Not in any of
> the other keychains?
>
> Corentin
>
>

Yes. I have valid certificates under login -> Certificates. As I have a MacBook where things are working I've gone so far as to export the certificates from that machine and import them on the one that isn't working. Entourage still reports the same error.

 

[Corentin Cras-Méneur]

Yes. I have valid certificates under login -> Certificates. As I have a
MacBook where things are working I've gone so far as to export the
certificates from that machine and import them on the one that isn't
working. Entourage still reports the same error.

Have you tried setting up the same account in Mail? Can it use the
certificates there?

Corentin

 

[BobWhite]

>
>
> Have you tried setting up the same account in Mail? Can it use the
> certificates there?
>
> Corentin
>
>

Sorry - had to go off and address some other issues. I have created a Mac Mail account, and get a similar message when I try and open an encrypted e-mail - no valid certificate in the keychain. It might be the certificate. I have gotten this to work on two other systems. On those, when I exported the certificates, I exported in PKCS#12 format. Everything works. On the systems giving me trouble, when I try to export in that format I get an error. I can only export in CER format. I've asked our administrator why there is a difference between the certificates.

 

[Corentin Cras-Méneur]

Sorry - had to go off and address some other issues. I have created a
Mac Mail account, and get a similar message when I try and open an
encrypted e-mail - no valid certificate in the keychain. It might be
the certificate.

Indeed.

I have gotten this to work on two other systems. On those, when I
exported the certificates, I exported in PKCS#12 format. Everything
works. On the systems giving me trouble, when I try to export in that
format I get an error. I can only export in CER format. I've asked our
administrator why there is a difference between the certificates.

..cer should be fine. That's not the issue.
I hope the admin will be able to help you out.

Corentin

 

[BobWhite]

>
>
>
> Indeed.
>
>
>
>
> .cer should be fine. That's not the issue.
> I hope the admin will be able to help you out.
>
> Corentin
>
>
>

Finally got the Entrust Admin to re-issue the certificate with all keys. That cleared the problem with not being able to export in all formats, and now Entourage finds the certificates. The solution to this was to have the admin restore entrust info into directory, and update encryption and verification key repair.

But after all that, Entourage still can't automatically unencrypt emails. Another problem to clear up.

 

[Corentin Cras-Méneur]

Finally got the Entrust Admin to re-issue the certificate with all
keys. That cleared the problem with not being able to export in all
formats, and now Entourage finds the certificates. The solution to this
was to have the admin restore entrust info into directory, and update
encryption and verification key repair.

I'm glad this is finally working!

But after all that, Entourage still can't automatically unencrypt
emails. Another problem to clear up.

Weird. I haven't seen that before.
Can you unencrypt in Mail?

Corentin

 

[BobWhite]

>
>
> Weird. I haven't seen that before.
> Can you unencrypt in Mail?
>
> Corentin
>
>

Well - the weirdness continues. I can and did send encrypted email from Entourage, and when I got a reply, Entourage was able to unencrypt it without problem. It seems it only has problems with old messages. If I use my Outlook account, forward an old message to myself, and read it on Entourage, there is no problem. A quirk, but a quirk I can live with.

Thank you for your time and inputs.