• Global Nav Open MenuGlobal Nav Close Menu
  • Apple
Search Support
Cancel
  • Apple
  • Mac
  • iPad
  • iPhone
  • TV
  • Music
  • Support
  • Where to Buy
Keychain Access User Guide
Open MenuClose Menu
  • Communities
  • Contact Support
macOS Catalina 10.15
macOS Mojave 10.14
macOS High Sierra
Table of Contents

Create your own certificate authority in Keychain Access on Mac

You can create your own certificate authority using the Certificate Assistant in Keychain Access. By becoming a certificate authority, you can issue certificates and validate users.

Open Keychain Access for me

  1. In the Keychain Access app on your Mac, choose Keychain Access > Certificate Assistant > Create a Certificate Authority.

  2. Enter a name for the certificate authority.

  3. Choose an Identity type, then choose the type of certificate to be issued by the certificate authority.

    To change the way the key pairs are generated and to manually specify the values in the certificate, select “Let me override defaults.”

    Note: You can create RSA keys up to 4096 bits. RSA keys smaller than 2048 bits are no longer supported.

  4. Type your email address in the “Email from” field, then click Continue.

  5. Review the certificate authority.

  6. To allow a user to request a certificate from you, click Mail Invitation, then add the user’s email address and an explanation in the email.

See alsoCreate self-signed certificates in Keychain Access on MacIssue new certificates in Keychain Access on Mac
Apple
  1. Support
  2. Keychain Access User Guide
  3. Create your own certificate authority in Keychain Access on Mac
Guinea-Bissau
Copyright © 2019 Apple Inc. All rights reserved.
Terms of Use Site Map