Mac|Life

How to Set up your certificat­e

-

Create an authority

Open Keychain Access and pick Keychain Access > Certificat­e Assistant > Create a Certificat­e Authority. Put a check mark next to “Let me override defaults,” enter your address under “Email from,” then click Continue.

Set an expiry date

Your CA is set to expire after a year. Extend its life by entering a higher value next to Validity Period. Deselect “Sign your invitation,” click Continue to enter some personal details, then click Continue again.

Set key usage info

The key pair info (2048 bits long and using the RSA algorithm) is fine as it is, so click Continue twice. At the Key Usage Extension page, check “Key Encipherme­nt,” “Certificat­e Signing,” and “Signature,” then click Continue.

Complete assistant

On the next page, check “Key Encipherme­nt” and “Signature,” then click Continue until you reach “Specify a Location For The Certificat­e.” Enable “On this machine, trust certificat­es signed by this CA,” then click Create.

Set up a certificat­e

Close Certificat­e Assistant, then choose Keychain Access > Certificat­e Assistant > Create a Certificat­e. Set Identity Type to Leaf, check “Let me override defaults,” and then click the Continue button.

Tweak settings

Specify how long you want your certificat­e to last before it expires, then click Continue. Enter some personal details (an email address is mandatory, but the rest is optional) and then click Continue once again.

Choose an issuer

Make sure the Certificat­e Authority you created is selected (it’ll likely be the only one listed), then click Continue. Run through the rest of the assistant, ensuring you enable Key Encipherme­nt on the Key Usage page.

Complete assistant

Verify your email address is listed under “rfc822Name” and finally click Create. The certificat­e should be listed as valid, meaning it’s ready to use. Click Done to add it to your keychain, quit Keychain Access and open the Mail app.

Send your message

Open a new message window and compose an email. You should see a blue button with a check mark in it next to the Subject field, which indicates the digital signature will be sent with your message to prove your identify to the recipient.

 ??  ??
 ??  ??
 ??  ??
 ??  ??
 ??  ??
 ??  ??
 ??  ??
 ??  ??
 ??  ??

Newspapers in English

Newspapers from Australia