How to Install Certificates on OS X Server 10.4

Installing and Configuring a Certificate on Mac OS X Server 10.4

After your certificate request is approved, you can download your SSL and intermediate certificate from within the SSL application. Both of these files must be installed on your Web server.

To Install Intermediate CA Certificates
Before installing your certificate, you need to complete the following procedure to install the Intermediate CA certificate:

Visit the repository.
Download the Intermediate.crt file.
Launch the Keychain Access application (/Applications/Utilities/Keychain Access)
If the button at the lower left of the Keychain Access window is labeled "Show Keychains" then click the button to show the Keychain list.
Select the "System" keychain.
Select File->Import. Navigate to and select the Intermediate.crt file that you downloaded in step #2 above.
Enter your password when prompted to authenticate to modify the keychain.
Verify that the "XYZ Certification Authority" appears in the list.
Close the Keychain Access application.

To Install Your Certificate
Use the following procedure to install your server certificate onto your system:

Launch the Server Admin tool and connect to the server where you want to install the certificate.
Highlight the server node at the top of the tree in the Computers & Services pane.
Select the Settings tab from the tab row at the bottom of the right pane. Select the Certificates tab from the tab row at the top of the right pane.
Select the item representing the certificate you have requested and click the "pencil" button to edit that item.
Click the Add Signed Certificate... button. Paste the text of your certificate into the field. Be sure to include the "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" header and footer lines. Click OK.
Click the Save button.

To Assign the Certificate to Your Services
After installing your certificate as well as the Intermediate CA certificate, you can assign this certificate to the desired services (Web, Mail, iChat, Open Directory, etc.). In the appropriate settings pane for the desired service.