Installation of a new SSL cert

abbywinters.com BV uses SSL certificates – small, secure pieces of code – to help secure our data and applications. We generate the code that identifies your computer to our servers, installed on your computer. When you visit our secured back-office sites (MDB, PPCMS, etc), your computer presents the SSL cert to our servers, and we veryify you are who you say you are.

We have emailed you the SSL Certificate (a .p12 file) itself. Va a separate channel, we have also messaged you a password for this SSL cert. For security reasons, this SSL Certificate will expire on close to the end of the year, and we’ll need to issue a new SSL cert (perhaps you have been directed to this page for that reason now).

Installing SSL certificates is easy on PC’s running Windows or Linux, and unfortunately a little more complicated on Macs running OSX.

To begin installation, you need the .p12 file supplied recently, and the password.

Failure mode 1: Reboot not performed after installation

If a reboot is not performed after installing the SSL certificate, some or all SSL-protected sites will show this error when visiting them;

Reboot, and restart Chrome. When restarting Chrome, you may have tabs open for SSL-protected web pages. These may still show this error (the error state is “cached”). Try opening a new tab for the SSL-protected site, and it typically works – you’ll be asked to select a certificate.

Failure mode 2: SSL cert not installed correctly

If the SSL setup has not worked correctly, you’ll be prompted for a username and password on a screen like this:

While this looks “legit”, it’s actually an indication of the SSL install not working! (even if the web address listed is different from this). Reboot your computer (don’t skip this!) and follow the instructions all over again, being careful to observe each step.

Installation for PC’s running Windows or Linux

Remove expiring SSL certificate for PC’s

Users who have never installed an SSL cert for working with us (that is, a new employee or contractor) can skip this uninstallation step.

If you are an existing user of our systems, you’ll have an old, nearly-expired certificate to delete. While this is not essential, it reduces complications in the future and is “good housekeeping”. And, it only takes 20 seconds!

  1. Ensure you have been issued the new SSL certificate!
  2. Chrome browser, Hamburger menu top-right, Settings
  3. Search for “cert”
  4. Select option “Manage certificates”; a new small window opens
  5. See screenshot below; repeat this process for each expiring SSL certificate
    1. Ensure “Personal” tab is selected; one or several certificates are listed
    2. Check the expiry date – if in next ~5 days, select the line item,
    3. Click “Remove” button, confirm
    4. Close the Certificates window
  6. Close the “Settings” tab in Chrome.

ABOVE: Steps for removing an SSL certificate on a PC.

Install new SSL certificate for PC’s

  1. Put the .p12 SSL certificate file somewhere handy on your computer (eg, Desktop)
  2. Double-click the .p12 file
  3. Accept all the defaults, say yes to any questions, click Next as necessary
  4. When asked for a password, paste in the SSL cert password supplied
  5. Again, accept all the defaults, say yes to questions, click Next / Finish as necessary
    1. See the message “The import was successful”
  6. Reboot your computer
    1. Yes, this is very annoying… but at least Chrome will remember all your open browser tabs!
  7. Navigate to the MDB web application
    1. We do not list the URL publically for security reasons, but it will be in emails received from your AWBV contact – search for “MDB”.
  8. Select certificate
    1. The first time using the new SSL certificate (and occasionally at other times) you’ll be asked to select the SSL certificate to use. There should only be one listed, so select “OK”
  9. You may be prompted to log in to the MDB – select your username, and enter your MDB password provided separately.

Installing an SSL cert for Firefox requires a different process – contact garion.hall@abbywinters.com for assistance if necessary.

The first time a newly installed certificate is used, you’ll be asked to confirm a security exception. These process may also be required if you “remove temporary internet files”, clear your cache, cookies, or similar.

You may see something like this:

Click “Advanced”.

Click “Proceed to <domain>”.

Check the “Failure modes” towards the top of this page for common issues, and steps to deal with them.

If you still experience problems, email screenshots to garion.hall@abbywinters.com.

Installation for Mac OSX

  1. Delete old cert(s)
    1. Open Chrome web browser (note, browsers other than Chrome may work, but are not recommended)
    2. Hamburger menu, Settings
    3. Search for “Cert”
    4. Select “Manage certificates”. Keychain Access app opens.
    5. Select “Login” keychain (should already be selected by default)
    6. Select “Certificates” category (should already be selected by default)
    7. Find “awbv.net” line item, select it
    8. Ctrl-click on it, select “Delete”, confirm deletion
    9. If there are any other awbv.net certificates, delete them also
  2. Download recently-emailed new .p12 SSL certificate file
    1. Email Subject is “Your new SSL certificate (awbv.net)”
    2. A small file is attached
    3. Save to Downloads, or similar location on your Mac
  3. Select and copy the SSL password messaged to you by other means
  4. Locate and double click on the p12 certificate file downloaded earlier
    1. Enter the SSL certificate password when prompted, cmd-V to paste
    2.  
    3. Keychain Access app is shown, several line items are added. Some have a red “x” icon overlaid, but that’s ok
  5. Navigate to the MDB web application
    1. We do not list the URL publically for security reasons, but it will be in emails received from your AWBV contact – search for “MDB”.
  6. Select certificate
    1. The first time using the new SSL certificate (and occasionally at other times) you’ll be asked to select the SSL certificate to use. There should only be one listed, so select “OK”
    1. When prompted, enter the password to allow Chrome to use Keychain Access and read the newly-installed certificate – this is the password you use to log in to your Mac.
    2. Click Always Allow. You may have to do this several times.
  7. See the MDB login screen
    1. This indicates SSL cert installation is successful
  8. You may need to reboot your Mac before proceeding – please do this before reporting an issue.

If you do not see this, check the “Failure modes” listed above. If still not working, email a screenshot of what you do see to garion.hall@abbywinters.com, and a screenshot of your Keychain Access.

Comments are closed.