Modifying this control will update this page automatically
Keychain Access User Guide
- Welcome
-
- Get information about a certificate
- Determine if a certificate is valid
- Change the trust settings of a certificate
- Request a certificate from a certificate authority
- Add certificates to a keychain
- Create your own certificate authority
- Create self-signed certificates
- Issue new certificates
- Create a certificate preference
- Keyboard shortcuts
- Copyright
You can create your own certificate authority using Certificate Assistant in Keychain Access. By becoming a certificate authority, you can issue certificates and validate users.
In the Keychain Access app on your Mac, choose Keychain Access > Certificate Assistant > Create a Certificate Authority.
Enter a name for the certificate authority.
Choose an identity type, then choose the type of user certificate to be issued by the certificate authority.
To change the way the key pairs are generated and to manually specify the values in the certificate, select “Let me override defaults.”
To make this the default certificate authority, select “Make this CA the default.”
Note: You can create RSA keys up to 4096 bits. RSA keys smaller than 2048 bits are no longer supported.
Enter your email address in the “Email from” field, then click Create.
Review the certificate authority.
Thanks for your feedback.