Certificate Installation
Penn Medicine Network

Install the Certificate Bundle

Follow these steps to install the certificate bundle on your Windows and Apple (MAC) computer.

Before You Begin

Administrator access is required to install the certificate bundle. Download the file before starting the installation process.

Download Certificate Bundle Certificate Bundle File (.crt)

Windows Step-by-Step instructions

4 steps • Windows

Install Certificate

Open your Downloads folder and double-click bundle.crt.

In the Certificate window, select Install Certificate.

Install Certificate.

Select Local Machine

Select Local Machine, then Next. Approve the administrator prompt if it appears.

If a File to Import screen appears, keep the downloaded bundle selected and continue with Next.

Select Local Machine

Use Automatic Selection

Select Automatically select the certificate store based on the type of certificate, then select Next.

 Use automatic selection.

Finish the Installation

Confirm the summary shows Automatically determined by the wizard. Select Finish, then OK when the import succeeds.

Finish the installation.
Confirm Installation
Confirm installation: Open certlm.msc. Check that emSign Root CA - G1 is in Trusted Root Certification Authorities, and emSign Root TLS CA - G1 plus InCommon Intermediate CA - OVG2C are in Intermediate Certification Authorities. If any are missing, download the original .cer files and repeat these steps for each missing certificate. Then reopen your browser or application.

Before You Begin

Download the certificate bundle and follow the four steps below to add missing certificates to the System keychain.

Download Certificate Bundle Certificate Bundle File (.cer)

MAC Step-by-Step Instructions

4 steps • MAC

Double-click the certificate bundle

Open your Downloads folder and double-click bundle.cer to open Keychain Access.

Add to the System Keychain

In Add Certificates, choose System from the Keychain menu, then select Add.

Add to the System keychain.

Choose the certificate store

Allow Keychain Access to modify the system keychain. Use Touch ID, or select Use Password and enter the password for an administrator account on your Mac.

This prompt may appear before or after you select Add. Approve it whenever it appears.

Approve the request if prompted.

Check the installed certificates

In Keychain Access, select System, then Certificates. Confirm these three entries are present:

  • emSign Root CA - G1
  • emSign Root TLS CA - G1
  • InCommon Intermediate CA - OVG2C
Select each certificate and check that it is valid. Keep the existing trust settings when the certificates are valid.

Check the installed certificates.
Installation Complete
Close and reopen your browser, then try connecting again.