Mac OS X El Capitan: Create CSR & Install SSL Certificate

Use these instructions to create your CSR (certificate signing request) and then, to install your intermediate and server (SSL) certificates.

  1. To create your CSR, see Mac OS X El Capitan: Create Your CSR.

  2. To install your SSL Certificate, see Mac OS X El Capitan: Install Your SSL Certificate.

For Yosemite Server (10.10), please see Mac OS X Yosemite: Create CSR & Install SSL Certificate.

 

1. Mac OS X El Capitan: Create Your CSR (Certificate Signing Request)

To get a valid SSL Certificate, first generate your CSR (certificate signing request). Then, use the contents of the CSR to order your SSL Certificate.

Mac OS X El Capitan Server (10.11): How to Generate a CSR with the Server App

  1. Open the Server App.

    In the Finder window, under Favorites, click Applications and then double-click Server.

    Mac OS X El Capitan

  2. In the Server App window, under Choose a Mac, do one of the following options to select the server on which to create your CSR:

    Note:   You should select the server on which you are going to eventually install this SSL Certificate.

    • To create the CSR on this server

      1. Select This Mac – YourServerName and then click Continue.

      2. Enter your Administrator Name and Administrator Password and then click Allow.

    • To create the CSR on another server

      1. Select Other Mac – YourServerName and then click Continue.

      2. Enter your Host Name/IP Address, your Administrator Name and Administrator Password and then click Allow.

      Mac OS X El Capitan

  3. In the Server App window, under Server, click Certificates.

    Mac OS X El Capitan

  4. On the Certificates page, click + > Get a Trusted Certificate.

    Mac OS X El Capitan

  5. On the Get a Trusted Certificate page, click Next.

    Mac OS X El Capitan

  6. Enter the following information:

    Host Name: Enter the name to be used to access the certificate. This name is usually the fully qualified domain name (FQDN).
    For example, www.yourdomain.com or yourdomain.com
     
    Contact Email Address: Enter an email address at which you can be contacted.
     
    Company or Organization: Enter the legally registered name of your organization or company.
     
    Department: Enter the name of your department within the organization. For example, you can enter IT or Web Security.
     
    Town or City: Enter the town or city where your organization or company is located.
     
    State or Province: Enter the state or providence where your organization or company is located.
     
    Country: In the drop-down list, select the country where your organization or company is located.
     

    Mac OS X El Capitan

  7. To generate your CSR, click Next.

  8. Click Save to save the CSR. Make sure you note the filename and location of the file.

    Mac OS X El Capitan

  9. Click Finish.

  10. Using a text editor (such as TextEdit, open the file and copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and enter it into the DigiCert order form.

    Note:    During your DigiCert SSL Certificate ordering process, make sure to select Mac OS X Server when asked to Select Server Software. This option ensures that you receive all the required certificates for Mac OS X El Capitan SSL Certificate Installation (Intermediate and Server (SSL) Certificates).

    Mac OS X El Capitan

    Ready to Order Your Mac OS X El Capitan SSL Certificates

    Buy Now Learn More
  11. After receiving your SSL Certificate from DigiCert, your can install it.

 

2. Mac OS X El Capitan: Install Your SSL Certificate

If you haven't created a Certificate Signing Request (CSR) and ordered your certificate, see Mac OS X El Capitan: Create Your CSR.

After receiving the SSL Certificate file, first install the intermediate certificate on your server. Next, install your SSL Certificate on the server. Finally, assign the certificate to Services.

To install and configure your SSL Certificate, do the following:

  1. Install the Intermediate Certificate

    Mac OS X El Capitan: How to Install the Intermediate Certificate.

  2. Install your SSL Certificate.

    Mac OS X El Capitan: How to Install Your SSL Certificate

  3. Assign your SSL Certificate to Services

    Mac OS X El Capitan: How to Assign Your SSL Certificate

 

i. Mac OS X El Capitan: How to Install the Intermediate Certificate

  1. Save the ZIP file your_domain_com.zip onto your server, and extract the SSL Certificate file (your_domain_com.crt) and the DigiCert Intermediate Certificate file (DigiCertCA.crt) to a folder.

    Mac OS X El Capitan

  2. Open Keychain Access.

    In the Finder window, under Favorites, click Applications, expand Utilities, and then double-click Keychain Access.

    Mac OS X El Capitan

  3. In the Keychain Access window, under Keychains, click System.

    Mac OS X El Capitan

  4. Drag-and-drop the DigiCertCA.crt file into the System folder.

    Mac OS X El Capitan

  5. Enter the administrator's password and click Modify Keychain to authorize the change.

 

ii. Mac OS X El Capitan: How to Install Your SSL Certificate

  1. Open the folder containing your SSL Certificate file (yourdomain_com.crt).

    Keep this folder open so that you can readily access this file.

  2. Open the Server App.

    In the Finder window, under Favorites, click Applications and then double-click Server.

    Mac OS X El Capitan

  3. In the Server App window, under Choose a Mac, do one of the following options to select the server on which you want to install your SSL Certificate.

    • To install the certificate on this server

      1. Select This Mac – YourServerName and then click Continue.

      2. Enter your Administrator Name and Administrator Password and then click Allow.

    • To install the certificate on another server

      1. Select Other Mac – YourServerName and then click Continue.

      2. Enter your Host Name/IP Address, your Administrator Name and Administrator Password and then click Allow.

      Mac OS X El Capitan

  4. In the Server App window, under Server, click Certificates.

    Mac OS X El Capitan

  5. On the Certificates page, double-click on the Pending certificate that was created when you generated the CSR.

  6. On your certificate's page (i.e. www.yourdomain.com), under Certificate Files, in the Drag files received from your certificate vendor here box, drag-and-drop your SSL Certificate file (yourdomain_com.crt).

    Mac OS X El Capitan

  7. Click OK.

    Mac OS X El Capitan

 

iii. Mac OS X El Capitan: How to Assign Your SSL Certificate to Services

  1. In the Server App window, under Server, click Certificates.

    Mac OS X El Capitan

  2. On the Certificates page, in the Secure services using drop-down list, select Custom.

    Mac OS X El Capitan

  3. In the Service Certificates window, in the Certificate drop-down list, select your new SSL Certificate for each Service to which you want to assign it.

    For example, in the Certificate drop-down list for Websites (Server Website – SSL) select your new SSL Certificate.

    Mac OS X El Capitan

  4. When you are finished, click OK.

  5. You have successfully installed, configured, and assigned your SSL Certificate to your respective Services.

Test Your Installation

If your website is publicly accessible, our DigiCert® SSL Installation Diagnostics Tool can help you diagnose common problems.




         
TRUSTe online privacy certification
Scott S. Perry CPA