K-State home » K-State Research and Extension » Technology  » Support » Web/Internet » Security Certificates
Technology
Security Certificates

KSRE Websites require new Root Certificates

Recently, many users trying to connect to secure websites on the KSRE system have been getting error messages about an unsecure connection. This is due to the fact that the root security certificate we are using has expired, and most likely your computer is not updated to include the new certificate. This has been caused by problems from web browser and operating systems manufacturers not updating their systems, and is out of our control. It should hopefully be remedied soon.

Thankfully, it is really simple to install the new certificates. Please follow the instructions below for your web browser:

 

Certificate Links

Primary Download Location

Root Certificate

Level 1 CA Certificate

 

Alternate Download Location

Root Certificate

Level 1 CA Certificate

 

Update 1/5/2010 - Users of Print Shop

 

If you have Print Shop installed, you may have issues installing these certificates. This is due to the fact that Print Shop uses the ".CER" extension, which is the same extension Internet Explorer uses when it downloads the files. If you are having this issue, you can either follow the steps below to try to fix the problem, or contact IET at (785) 532-6720 and we can help you.

  1. Download both certificates to a folder on your computer. You should be able to right click them and select "Save Link as" or "Save Target as" to download them to your computer
  2. In Internet Explorer, click the Tools button (it should be on the right side of the screen in version 7 and 8) or the tools menu at the top of the screen, and select Internet Options.
  3. Click the Content tab, and then click the Certificates Button.
  4. In the Certificates window, click Import.
  5. Click Next, then click Browse, and choose the ipsCAGlobal certificate you downloaded in step 1.
  6. Click Next, then click Finish to install the certificate. It should then say "The import was successful."
  7. Repeat steps 4-6 for the ipsCALEVEL1CA file.
  8. Make sure you close Internet Explorer and reopen it for the changes to take effect.

 

Mozilla Firefox

  1. Click the Root Certificate link above.
  2. In the Downloading Certificate box, put a checkmark in all 3 boxes and click OK.
  3. Repeat for the Level 1 CA Certificate link.
  4. Completely close and reopen Firefox to load the new certificates.


Microsoft Internet Explorer

  1. Click the Root Certificate link above.
  2. A File Download box will appear. Click Open to open the certificate file.
  3. Once it is downloaded, a Certificate window will appear (you may have to click it on the Taskbar at the bottom of the screen). In that window, click Install Certificate.
  4. You will see a Certificate Import Wizard appear. Click Next twice, then click Finish to install the certificate. It should then say "The import was successful."
  5. Repeat for the Level 1 CA Certificate link.
  6. Completely close and reopen Internet Explorer to load the new certificates.

Apple Safari

  1. Click the Root Certificate link above.
  2. In the Downloads box (or wherever the certificates downloaded to), double click the certificate file to open it
  3. That will open the Keychain Access Application, and prompt you for a keychain to add it to. In Mac OS X 10.5 and above choose System. For Mac OS X 10.4, choose X509Anchors. Click OK
  4. Repeat for the Level 1 CA Certificate link.
  5. Quit Safari completely, then reopen it to load the new certificates

 

Additional Information

 

If you have any problems loading these certificates, or find any sites that do not work after following these steps, please contact IET Tech Support at (785) 532-6270 or e-mail us at ksresupport@ksu.edu.