Connect BYOD Devices - Apple Mac Certificate Install

Apple Logo These instructions are for Apple Macs. There are separate instructions for Apple iPhones & Ipads, Android, Chromebooks and Windows devices.

On your Apple Mac, you may get certificate error messages when going to secure websites, or the sites might not load at all. Secure websites have addresses that begin with "https" and they show a padlock icon in your web browser's address bar once they've loaded. To load these sites without the error messages you need to install a Kerikeri High School certificate onto your device.

1. Ensure you are connected to Kerikeri High School's KKHS_BYOD wifi, have logged in through the Fortinet firewall and have access to the school website at www.kerikerihigh.ac.nz. Instructions on how to do this are available here.

2. Close *all* running apps like Firefox, Chrome, Mail, Photoshop etc.

3. Open Safari and go to www.kerikerihigh.ac.nz/kkhscert.cer by typing it in to the address bar.
When prompted, to 'Allow Downloads' answer 'Yes'.

4. In the bottom-right by the bin, you will see the newly downloaded certificate. Click on it to add it to the system. The 'Add Certificate to Keychain' wizard will appear.

5. Change the keychain from 'login' to 'System', then click 'Add'.
You'll be prompted for the Mac's system username and password. Enter these and click 'Modify keychain'.

6. The system keychain will be displayed. In the left-hand pane select 'System'.
In the right-hand pane double-click 'Fortigate CA'. The certificate will be displayed.

7. Expand the 'Trust' section and change the 'When using this certificate' setting from 'Use System Defaults' to 'Always Trust'.

8. Close the certificate and when prompted, enter the Mac's system username and password and click 'Update Settings'.

9. Re-open your web browser. Try going to a secure website, e.g. https://www.google.com
You should no longer get certificate security warnings.

These instructions were written using MacOS 10.15 (Catalina). The installation details may differ on other versions but the concepts are the same.