Apple Mail – Accepting security certificates

Click here for more on this news post

If you are using Apple Mail you may find that you have difficulty logging into your email account following our recent update of our Security Certificate.

This is quite a common issue with Macs. The following should help to explain what going on and instruct you on how to accept the updated certificate

In most cases the first time Apple Mail connects to your mailbox it will show a dialog box saying that the identity of your mail server can not be identified. Apple Mail will prompt you to verify the server certificate when it first connects to a new mail server.

Click on the “Show Certificate” button to see the details. Here you can see that the problem is that the certificated was issued for ds.lunariaweb.com and Apple Mail complains that it doesn’t match you mail server’s name (ie: mail.yourdomain.com).

In this case this is OK because your mail server runs on a shared hosting platform, so the SSL certificate is also shared. This means that all domains on a given server (ds.lunariaweb.com) can connect via SSL using the same certificate.

Make sure you select the checkbox labeled Always trust “ds.lunariaweb.com” when connecting to “mail.yourdomain.com”. This way we can tell Apple Mail that it is safe to trust this certificate.

You will be prompted for admin credentials (this is your OS X account, the user/password combination you use to log into your computer, nothing to do with the mailbox or hosting).
OS X is asking for credentials in order to make changes to the “Keychain”.

If you dismissed the dialog above when first connecting to your mailbox Apple Mail won’t ask you again, but you can always use OS X’s “Keychain Access” program to fix this. “Keychain Access” can be found in “Applications” / “Utilities”.

In the top right corner of the “Keychain Access” interface (see below) you can search for “ds.lunariaweb.com” to filter certificates by name and you will hopefully see the certificate appear in the main list. To make sure Apple Mail prompts you to verify the certificate again when you next connect simply select the certificate from the list and delete it by pressing the “back space” key or “Ctrl + Click” on the certificate and select “Delete” from the context menu.