Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I don't know much about certificates but one of them on a Snow Leopard Server just expired and I'm trying to replace it. It was self-signed at "birth" with the Mac mini server it came installed on.

I have gone through the motions, as mentioned in the Server Security Config manual, to create a new self-signed certificate and it seems to be working, but when you click on it in Server Admin it says in big red letters:

This root certificate is not trusted

Whereas the old expired one says:

This certificate has custom trust settings

How can I "trust" the new certificate so it's similar to the 'old' one?

share|improve this question
up vote 1 down vote accepted

Open "Keychain", change "Keychains" (upper left pane) to "System", go to category "Certificates" (bottom left pane), and find your cert in the right pane. Double click to open the cert and expand the "Trust" section (by clicking on the grey triangle).

Now you can change the "When using this certificate: " setting to "Always Trust".

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.