Using A PKI Certificate For Mac Devices

When talking about any PKI certificate, it is important to realize there are several different options to consider. In most cases when people use the term SSL/TLS certificate, they are talking about a way to secure a domain and subdomains.

This is the SSL/TLS certificate that will protect a specific website, either internal or external, through the encryption of data transferred between a client and a server or, in some cases between two servers. While they are most commonly called SSL/TLS (Secure Sockets Layer/Transport Security Layer) certificates, they are also technically PKI certificates.

This is because Public Key Infrastructure (PKI) is the framework that is used to create the security. This framework includes the use of a set of related mathematical keys that encode and then decode the information. One key is private, known only to the sender (with email) or the server (with SSL/TLS certificates for domains). If the two keys are not able to "recognize" each other, they cannot decrypt the information, ensuring that only the intended recipient, either the server or the email receiver, has access to the information after transmission.

Personal Certificates

Personal Authentication Certificates may also be known more simply as digital certificates, client certificates or an S/MIME (Secure Multipurpose Mail Extensions) certificate.

These are used to secure your email with a digital certificate from a trusted Certificate Authority. If you are using Comodo, you will find our products can be installed on any type of device and there are just as easy to install on a PC or as a PKI certificate for Mac computers, laptops or mobile devices.

It is very important when applying for a PKI certificate for Mac computers or devices to use the specific computer or device for the request that you wish to use for the install. This is essential as the information you receive from Comodo on the certificate will be specific for that computer. It is possible once it is installed, to also use a smart card or a USB device to move the certificate through using import features in the system.

Importing a Certificate

If you need to move the PKI certificate for Mac devices, the process is not complicated, but it does require a few steps. First, you will need to export the certificate to a browser. If you are using a Mac, you will most likely have the Mac OS X/Apple Mail client and you are typically going to be using the Safari browser.

This will be the same process to use if you have the PKI certificate for Mac computers and want to move it to your iOS mobile devices such as an iPad or an iPhone. Both will use a self-prompting type of import and installation feature.

On your computer, you will need to import the file by using the Keychain Access found in Applications and then Utilities. From here you will click on login and then file and import items. You will then choose the file that contains your PKI certificate for Mac and enter the password you use for the certificate on your existing system.

If you are asked, always click on the Always Trust option for Comodo Certificates. This will make it easier and faster if the recipient is sending his or her certificate and it is also from Comodo. Now, when you compose an email, you will see the digital signature button in on the email form. Next to this you will see the lock that allows you also to encrypt.

When moving the PKI certificate for Mac from a computer to an iPhone or iPad complete the same process. You will need to find the file, which will be a .p12 file. Then clicking on this will bring up the Install Profile. There will be an install button on the right side, just lick that button. You will get a message saying the certificate cannot be verified and the settings on the phone will change. As you are the importer of the certificate you know it to be from a trusted source so click install now.

Then, as the final step, add your password and the device will complete the install. It will confirm the identity certificate with a trusted designation. You will also need to go into the Advanced Settings in your account that matches the certificate and turn the S/MIME on.

If you need help with any aspect of our PKI products from desktops to iPads, give us a call at +1 888 266 6361.You can also see our guides online at for basic and advanced assistance.

Related Articles
Back to TOP