root certificate problem

T

The Little One

Have set up my exchange account in Entourage 2004. All works fine except I
get the "unable to establish root certificate" error message. Having looked
at various websites, I got my Administrator to export a certificate for me.
I imported it with Microsoft Cert Manager, trashed my OfficeSync
Preferences, and started Entourage. However I still get the error message.

I tried deleting and recreating the account in Entourage, but still get the
error message.

Am using Mac OS X 10.3.9.

Any suggestions would be greatfully received.
Thanks.
 
C

Chris Ridd

Have set up my exchange account in Entourage 2004. All works fine except I
get the "unable to establish root certificate" error message. Having looked
at various websites, I got my Administrator to export a certificate for me.
I imported it with Microsoft Cert Manager, trashed my OfficeSync
Preferences, and started Entourage. However I still get the error message.
Click to expand...

You need to add it to the keychain /System/Library/Keychains/X509Anchor.
Keychain Access.app will do this correctly. Maybe the MS Cert Manager is
more oriented towards certificates for users?

Another possibility is that your administrator gave you the wrong cert. You
can obtain the certificate yourself with a bit of command line magic (using
the "openssl s_client" program) but first check that the cert's in the right
place.

Rest assured that everything does work correctly as long as you put certs in
the right place! There are however several ways to slip up :-(
I tried deleting and recreating the account in Entourage, but still get the
error message.

Am using Mac OS X 10.3.9.
Click to expand...

Tiger makes this a bit easier. (There are better reasons to upgrade to Tiger
though!)

Cheers,

Chris
 
M

Matthew Smith

Chris Ridd said:
You need to add it to the keychain /System/Library/Keychains/X509Anchor.
Keychain Access.app will do this correctly. Maybe the MS Cert Manager is
more oriented towards certificates for users?

Another possibility is that your administrator gave you the wrong cert. You
can obtain the certificate yourself with a bit of command line magic (using
the "openssl s_client" program) but first check that the cert's in the right
place.

Rest assured that everything does work correctly as long as you put certs in
the right place! There are however several ways to slip up :-(


Tiger makes this a bit easier. (There are better reasons to upgrade to Tiger
though!)
Click to expand...

Does it ever! I had tried to get it working under 10.3 but I never had
it working properly. Yesterday when I logged in using Outlook Web Access
in Safari under Tiger. It complained about the certificate but gave me
the option to trust certificates from this source. When I clicked on the
check box I was then asked for my password so it could be entered into
the keychain. Now I don't have a problem in Entourage. It certainly
reduced the instructions for getting it to work.
 
T

The Little One

I was going to upgrade soon anyway. Might do it sooner rather than later.
Thanks
 
Top