Installing InCommon and USERTrust Certificates On Your Computer (Mac and Windows)

Mac Users

1. Taking note of the name, double click Comodo RSA Certification Authority or Sectigo RSA Domain Validation Authority. Keychain Access will launch.
2. If an Add Certificates prompt appears, click the Keychain drop-down menu and select System. Click Add.
3. The Keychain Access window displays. Double click the file that you selected in the first step.
4. Expand the Trust menu. Set the When using this certificate option to Always Trust. Close the window.
5. If prompted, enter your username and password and click Update Settings.
6. Use steps 1 through 5 to install the other certificate.

Windows Users

1. Taking note of the name, double click Comodo RSA Certification Authority or Sectigo RSA Domain Validation Authority.
2. Click the Install Certificate button.
3. The Certificate Import Wizard displays. Choose Local Machine and click Next.
4. Select Place all certificates in the following store. Click the Browse button and choose Intermediate Certification Authorities. Click OK, then click Next.
5. Click Finish.
6. An import successful screen will appear. Click OK.
7. You will return to the main Certificate window. Click OK.
8. Use steps 1 through 7 to install the other certificate.

Mac Users

1. Taking note of the name, double click SHA-2 Root USERTrust RSA Certification Authority or USERTrust RSA Certification Authority. Keychain Access will launch.
2. If Add Certificates prompt appears, click the Keychain drop-down menu and select System. Click Add.
3. The Keychain Access window displays. Double the file that you selected in the first step.
4. Expand the Trust menu. Set the When using this certificate option to Always Trust. Close the window.
5. If prompted, enter your username and password and click Update Settings.
6. Use steps 1 through 5 to install the other UserTrust certificate.

Windows Users

1. Taking note of the name, double click SHA-2 Root USERTrust RSA Certification Authority or USERTrust RSA Certification Authority.
2. Click the Install Certificate button.
3. The Certificate Import Wizard displays. Choose Local Machine and click Next.
4. Select Place all certificates in the following store. Click the Browse button and choose Trusted Root Certification Authorities. Click OK, then click Next.
5. Click Finish.
6. An import successful screen will appear. Click OK.
   Note: If a Security Warning displays, click Yes.
7. You will return to the main Certificate window. Click OK.
8. Use steps 1 through 7 to install the other USERTrust certificate.

Why do I need to install certificates?

When your device sends a request to connect to a server, whether it be a website or Wi-Fi connection, it can be intercepted by a malicious party. Once hijacked, they can obtain any data you provide.

How to the certificates work?

Your computer (for Wi-Fi) or browser (for websites) attempts to make a connection to Pitt’s server, and requests for it to identify itself. Pitt’s server sends it’s copy of the certificate to your computer/browser. Your device checks to see if it’s trusted by comparing the server’s copy of the certificate to the one that you’ve installed. If successful, it sends a message back to Pitt’s server and proceeds with the secure connection.

How do I know my connection to a website is secure?

If you look at the URL of the website, a secure connection will begin the URL with “HTTPS” instead of the traditional “HTTP”. Your browser should also display a lock icon near the URL, which you can click to see the certificate information.

Do I need to install all four certificates?

Yes. The certificate package allows you to make a secure connection to Pitt’s websites, as well as connect to PittNet (Wi-Fi).

If I am having trouble installing the certificates are there steps that I can take?

Contact the Technology Help Desk at 412-624-HELP (4357).