How JustAnswer Works:

  • Ask an Expert
    Experts are full of valuable knowledge and are ready to help with any question. Credentials confirmed by a Fortune 500 verification firm.
  • Get a Professional Answer
    Via email, text message, or notification as you wait on our site.
    Ask follow up questions if you need to.
  • 100% Satisfaction Guarantee
    Rate the answer you receive.

Ask Omer Your Own Question

Omer
Omer, Network Administrator
Category: Networking
Satisfied Customers: 309
Experience:  Been a Network Administrator for 5 years
37817776
Type Your Networking Question Here...
Omer is online now
A new question is answered every 9 seconds

Hi, Im trying to connect to my works Outlook email account,

Resolved Question:

Hi,

I'm trying to connect to my work's Outlook email account, which I do every day on my MacBook Air. Suddenly, I am unable to do so because I get the following notices that pop up when I try to connect:

This client requires a certificate to validate your identity.n Select the certificate to use when you connect to this website and then click to continue.

I then see two certificates: one is listed as a (Mobile Me Sharing Certificate) (Apple.Mac Certificate Authority), and the other is listed as a (MacSharing Certificate) (Certificate Authority.)

When I click on either of the certificates, I am given a bunch of info that says they are expired, one in 2009, and one in Nov. of 2011.

I've never had this happen before, and I can't log on or move forward because of this. Any ideas how to remedy this situation?

Thanks.
Submitted: 2 years ago.
Category: Networking
Expert:  Omer replied 2 years ago.

Omer :

Hi I am one of the experts here on Just Answer.com

Omer :

When you say your trying to connect to your works outlook email account are you doing this through a webpage?

Omer :

Have you tried with any other browser?

Customer:

Yes. I am a teacher, and I am going through my school's webpage. I can still connect through my phone and iPad going through the website.

Customer:

I have not tried going through another browser. Let me try that and I'll be right back.

Omer :

Thanks

Omer :

And please let me know which browser you are using and having the issue with IE Chrome Safari IE Firefox

Customer:

I am currently going through Safari IE. This is what I have used every day until now.

Omer :

If you can in Safari click on the top where it says safari in the menu bar and then click about safari so you can tell me the version of it you are using that will be great

The issue you are having is that your safari is not accepting the SSL certificate your email site is using so we will have to change some settings or reset something depending on the version

Customer:

I am using Version 5.1.1 (7534.51.22)

Omer :

Thanks for that have you tried accessing the site with Firefox or chrome?

Customer:

No. Should I?

Omer :

Yes please do that way we can correctly assume its just an issue with your safari and not a setting in your computer

Customer:

I just downloaded Firefox. Let me try that.

Omer :

ok sounds good

Customer:

Okay. I can log on through Firefox, but I hate Firefox. Any idea how I can fix it so I can still log on through Safari, or am I stuck with Firefox?

Omer :

When you get a chance can you also tell me what version of MAC OSX your machine is running
To find it click on the apple in the top left then click about this mac

Omer :

Ok good to know we have it narrowed down to a safari issue

Customer:

I'm using version 10.7.2.

Omer :

Perfect thanks give me just a second

Omer :

Out of curiosity did you go from 10.7.1 to 10.7.2?

Customer:

Not that I know of, and not intentionally.

Omer :

The reason I ask is there is a pretty known bug in 10.7.2 at least it has happened to a lot of people.

Customer:

Okay.

Omer :

Most people are reporting that it happens when they go from 10.7.1 - 10.7.2
Where the update breaks ssl from working in safari

Omer :

there is a temporary fix but you have to basically do it every time you reboot / wake up the computer

Customer:

A friend gave me this Mac about 3 months ago. He took his personal stuff off of it, but I don't know if he made a change I'm unaware of.

Omer :

Or some people have done is wipe the computer and reload 10.7 and go straight to 10.7.2

Omer :

it would load with an apple update

Customer:

How do I do that?

Omer :

the temporary fix would be to


Delete ~/Library/Keychains/login.keychain and /Library/Keychains/System.keychain.


This temporarily resolves the issue, and lets you load secure sites, but a minute or two after rebooting or hibernating somehow magically undoes the fix, so you have to delete these files over and over.

Customer:

Yuck.

Omer :

yeah

Customer:

So, should I try to wipe it clean and start over? And if so, what risks does that entail?

Customer:

In other words, what would I lose in the process? Any thing I should back up before trying that?

Omer :

That would be up to you, you would need to back up all your data

Omer :

and programs

Omer :

it essentially wipes the computer clean

Omer :

down to just the os

Customer:

Oh. Is there no way to update Safari on its own and see if that can fix the problem somehow?

Omer :

you can go to that link

Omer :

but Im pretty sure 10.7.2 has the latest version built in to it

Omer :

the ssl break from my understanding goes deeper than safari
Do you use time machine to back up your computer?

Customer:

I may try that and see if it works. I think so. Should I try and do that before I move on?

Customer:

That last point was in reference to time machine.

Omer :

Yes please give it a go

Omer :

one second

Omer :

you would need a backup before 10.7.2 installed

Omer :

to when everything was working

Omer :

give me just a moment im looking through some of my notes on 10.7.2 and any possible hotfixes that may help yo

Omer :

you

Customer:

I've actually never used the time machine feature since I've owned this. Should I start it now? It may take a few minutes...

Omer :

No not at this point

Customer:

Okay

Omer :

OK so some people have been using a work around and there are to possible ones

One is to go into Keychain access
Keychain Access and run the repair. Then turn off the CRL and OSCP checking and then exited Keychain.
Now the down side is now that it wont check for certificates but its a work around some people dont mind.

Another was to make sure the firewall on their network allowed pass throughs to the CRL and OSCP servers of the certificates so it could verify because without being able to verify keychain in 10.7.2 will just hang and not connect

Customer:

Let me try the Keychain access. I've never heard of that until this popped up last night. Maybe that's the issue?

Customer:

How do I get to Keychain?

Omer :

you should be able to type in keychain.app and finder should bring it up for you

Customer:

where should I type that in?

Customer:

I found the keychain access. How do I run the repair?

Customer:

This is where the expired sharing certificates live. Any chance you know how I can renew them?

Omer :

Sorry for the delay

Omer :

trying to see if I can find a video to show you exactly how to run it

Omer :

you can see your certs there but you cannot update them you can delete ones that are there though

Customer:

Okay. I'm in Keychain Access. This is apparently where the expired certificates that seem to be causing the problem live. Any chance you know how I can renew them?

Customer:

hello?

Omer :

Hi

Omer :

you cannot renew a cert here

Omer :

they get downloaded from websites you visit

Customer:

Hello?

Omer :

Yes please give me one second

Omer :

Can you not see my responses?

Customer:

Hi. We got disconnected for a minute.

Customer:

I found keychain access.

Omer :

AH ok great

Customer:

The expired sharing certificates live there. Any way I can renew them through this point somehow?

Customer:

Sorry about that!

Omer :

you cannot renew them their but you can delete them out

Customer:

Should I try that?

Omer :

Yes

Customer:

Bingo!!!! I deleted them, and now I can log on through Safari again!

Omer :

Ok perfect

Omer :

Glad I could help

Customer:

Thank you! You were very helpful and patient. Have a great Saturday.

Omer :

You too and enjoy the weekend

Omer :

please click the accept answer button so we may close this question

Omer, Network Administrator
Category: Networking
Satisfied Customers: 309
Experience: Been a Network Administrator for 5 years
Omer and 5 other Networking Specialists are ready to help you

JustAnswer in the News:

 
 
 
Ask-a-doc Web sites: If you've got a quick question, you can try to get an answer from sites that say they have various specialists on hand to give quick answers... Justanswer.com.
JustAnswer.com...has seen a spike since October in legal questions from readers about layoffs, unemployment and severance.
Web sites like justanswer.com/legal
...leave nothing to chance.
Traffic on JustAnswer rose 14 percent...and had nearly 400,000 page views in 30 days...inquiries related to stress, high blood pressure, drinking and heart pain jumped 33 percent.
Tory Johnson, GMA Workplace Contributor, discusses work-from-home jobs, such as JustAnswer in which verified Experts answer people’s questions.
I will tell you that...the things you have to go through to be an Expert are quite rigorous.
 
 
 

What Customers are Saying:

 
 
 
  • I am very happy with my very fast response. Eric is very knowledgeable in the subject area. Thank you! RP Austin, TX
< Last | Next >
  • I am very happy with my very fast response. Eric is very knowledgeable in the subject area. Thank you! RP Austin, TX
  • My Expert answered my question promptly and he resolved the issue totally. This is a great service. I am so glad I found it I will definitely use the service again if needed. One Happy Customer New York
  • Wonderful service, prompt, efficient, and accurate. Couldn't have asked for more. I cannot thank you enough for your help. Mary C. Freshfield, Liverpool, UK
  • This expert is wonderful. They truly know what they are talking about, and they actually care about you. They really helped put my nerves at ease. Thank you so much!!!! Alex Los Angeles, CA
  • Thank you for all your help. It is nice to know that this service is here for people like myself, who need answers fast and are not sure who to consult. GP Hesperia, CA
  • I couldn't be more satisfied! This is the site I will always come to when I need a second opinion. Justin Kernersville, NC
  • Just let me say that this encounter has been entirely professional and most helpful. I liked that I could ask additional questions and get answered in a very short turn around. Esther Woodstock, NY
 
 
 

Meet The Experts:

 
 
 
  • James

    Sr. Network Administrator

    Satisfied Customers:

    1711
    Highly experienced with wireless networks and wireless equipment, LAN and networking protocols
< Last | Next >
  • http://ww2.justanswer.com/uploads/BA/barrenrock/2011-10-19_215925_JamesJAFinal.64x64.jpg James's Avatar

    James

    Sr. Network Administrator

    Satisfied Customers:

    1711
    Highly experienced with wireless networks and wireless equipment, LAN and networking protocols
  • http://ww2.justanswer.com/uploads/Claws224/2009-07-07_063935_Dork_Portrait.JPG Claws224's Avatar

    Claws224

    IEEE Network Engineer

    Satisfied Customers:

    1256
    IEEE, Microsoft
  • http://ww2.justanswer.com/uploads/KN/knelly74/2011-4-14_215651_kevin.64x64.jpg Kevin's Avatar

    Kevin

    LAN/WAN Specialist

    Satisfied Customers:

    1165
    Certified MCSA and MCP Network Administrator with over 20 years of PC experience.
  • http://ww2.justanswer.com/uploads/tealnet/2009-09-26_000218_headshot_64.jpg Eric K.'s Avatar

    Eric K.

    Network Administrator

    Satisfied Customers:

    510
    13 years of desktop, server and network support experience
  • http://ww2.justanswer.com/uploads/CL/clagesolutions/2012-6-27_145545_20120608Geoff.64x64.jpg Mr. Clark's Avatar

    Mr. Clark

    Network Engineer

    Satisfied Customers:

    510
    Computer Business Owner / Former DoD Network Specialist
  • http://ww2.justanswer.com/uploads/MA/matthewpj73/2012-1-20_18729_TWO.64x64.jpg Matthew J's Avatar

    Matthew J

    Computer Support Specialist

    Satisfied Customers:

    397
    12+ yrs computer diagnosis/repair, network infrastructure install and support, IT Administration
  • http://ww2.justanswer.com/uploads/SE/Seashore2011/2011-12-6_33418_111205223015.64x64.jpg Chris L.'s Avatar

    Chris L.

    Support Specialist

    Satisfied Customers:

    384
    Certified Networking expert with over 10 years experience.
 
 
 

Related Networking Questions