Installing InCommon and USERTrust Certificates On Your Computer (Mac and Windows)

Overview

Plan to use PittNet Wi-Fi or connect your computer to a wired network port in a regional campus residence hall or public area (like a classroom or conference room)? You will need to install network certificates. Network certificates are used to create a secure connection between your computer and Pitt's servers, adding an additional layer of protection for data and your device. These instructions explain how to install the certificates manually on your Mac or Windows computer. Once the certificates are installed, configure your Windows or macOS operating system.

Before installing the certificates and configuring your computer manually, visit our page on PittNet Wi-Fi and wired networks to learn how to complete these steps.

Benefits

Creates a safe, secure user experience
Protects your and Pitt's data
Encrypts browser-to-server and server-to-server communications

Detail

Get Started in 3 Easy Steps

Download the Certificates

Log in to the Software Download Service via My Pitt (my.pitt.edu).
Choose one of the following options:
- Mac Users-enter InCommon Certificates for Mac in the Search box and click the Search icon.
- Windows Users-enter InCommon Certificates for Windows in the Search box and click the Search icon.
Click the InCommon Certificates for Mac or the InCommon Certificates for Windows link.
Click the Download button.
From the Download links accordion click the 2020_Certs.zip file link.
Click Save File, then OK.
Locate and unzip the file. The certificates, will be contained in a folder called 2020_Certs.

Install the Two Authority Certificates

There are two certificates that are included in the downloaded zip file–Comodo RSA Certification Authority and Sectigo RSA Domain Validation Authority. Repeat the process below to install each of them on your device.

Authority Certificate Installation Process

Mac Users

Taking note of the name, double click Comodo RSA Certification Authority or Sectigo RSA Domain Validation Authority. Keychain Access will launch.
If an Add Certificates prompt appears, click the Keychain drop-down menu and select System. Click Add.
The Keychain Access window displays. Double click the file that you selected in the first step.
Expand the Trust menu. Set the When using this certificate option to Always Trust. Close the window.
If prompted, enter your username and password and click Update Settings.
Use steps 1 through 5 to install the other certificate.

Windows Users

Taking note of the name, double click Comodo RSA Certification Authority or Sectigo RSA Domain Validation Authority.
Click the Install Certificate button.
The Certificate Import Wizard displays. Choose Local Machine and click Next.
Select Place all certificates in the following store. Click the Browse button and choose Intermediate Certification Authorities. Click OK, then click Next.
Click Finish.
An import successful screen will appear. Click OK.
You will return to the main Certificate window. Click OK.
Use steps 1 through 7 to install the other certificate.

Install the Two UserTrust Certificate

There are two USERTrust certificates that are included in the downloaded zip file–SHA-2 Root USERTrust RSA Certification Authority and USERTrust RSA Certification Authority. Repeat the process below to install each of them on your device.

USERTrust Certificate Installation Process

Mac Users

Taking note of the name, double click SHA-2 Root USERTrust RSA Certification Authority or USERTrust RSA Certification Authority. Keychain Access will launch.
If Add Certificates prompt appears, click the Keychain drop-down menu and select System. Click Add.
The Keychain Access window displays. Double the file that you selected in the first step.
Expand the Trust menu. Set the When using this certificate option to Always Trust. Close the window.
If prompted, enter your username and password and click Update Settings.
Use steps 1 through 5 to install the other UserTrust certificate.

Windows Users

Taking note of the name, double click SHA-2 Root USERTrust RSA Certification Authority or USERTrust RSA Certification Authority.
Click the Install Certificate button.
The Certificate Import Wizard displays. Choose Local Machine and click Next.
Select Place all certificates in the following store. Click the Browse button and choose Trusted Root Certification Authorities. Click OK, then click Next.
Click Finish.
An import successful screen will appear. Click OK.
Note: If a Security Warning displays, click Yes.
You will return to the main Certificate window. Click OK.
Use steps 1 through 7 to install the other USERTrust certificate.

Related Information

Frequently Asked Questions

Why do I need to install certificates?

When your device sends a request to connect to a server, whether it be a website or Wi-Fi connection, it can be intercepted by a malicious party. Once hijacked, they can obtain any data you provide.

How to the certificates work?

Your computer (for Wi-Fi) or browser (for websites) attempts to make a connection to Pitt’s server, and requests for it to identify itself. Pitt’s server sends it’s copy of the certificate to your computer/browser. Your device checks to see if it’s trusted by comparing the server’s copy of the certificate to the one that you’ve installed. If successful, it sends a message back to Pitt’s server and proceeds with the secure connection.

How do I know my connection to a website is secure?

If you look at the URL of the website, a secure connection will begin the URL with “HTTPS” instead of the traditional “HTTP”. Your browser should also display a lock icon near the URL, which you can click to see the certificate information.

Do I need to install all four certificates?

Yes. The certificate package allows you to make a secure connection to Pitt’s websites, as well as connect to PittNet (Wi-Fi).

If I am having trouble installing the certificates are there steps that I can take?

Contact the Technology Help Desk at 412-624-HELP (4357).

0 reviews

Print Article