Accessing the Curriculum Management System Off-campus Process for obtaining and installing a CMS certificate on a home Mac

Transcription

1 INFORMATION SERVICES ICT Service Delivery Accessing the Curriculum Management System Off-campus Process for obtaining and installing a CMS certificate on a home Mac Introduction This service enables staff to access the Curriculum Management System (CMS) when off-campus. It is done using a two-factor authentication mechanism known as a client side certificate. You must obtain the certificate from a University-based computer, copy it to a portable device and then install it on the computer that you will use to access the CMS off-campus. Key Steps in the Process At the University (this document) * 1. Log on to the enrolment server [the server hosting the CMS certificates] and request a certificate. 2. Install the certificate into the browser on your University computer. 3. Export the certificate to a portable device and add password protection to it. At Home (this document) * 4. Import the certificate into the internet browser on your home computer. 5. Access the CMS from home. * You can download the appropriate documents from our website at: Obtaining the certificate from a University computer Internet Explorer v11 Firefox OSX Safari (for Mac users) Installing the certificate on a home computer Internet Explorer v11 Firefox Google Chrome OSX Safari (for Mac users) Note: The same, single document covers both aspects for the Mac. Page 1

2 Important Note: This user guide is for Safari v7 on OSX 10.9 and addresses both the University and Home aspects of the process. Logging on to the enrolment server [the server hosting the CMS certificates] and requesting a certificate. To generate a certificate for home use to connect to the CMS, a certificate must first be created on campus and exported to be installed on an off-campus mac. Open the following web link which will take you to the enrolment server If you are logged onto the staff domain you will first see the Request a certificate screen otherwise you will be prompted for a username and password. Enter your University network credentials (your ecode and network password) and click OK to continue. Click on Request a certificate to continue. Page 2

3 Click on User Certificate Accept the defaults and click Submit. The certificate will be issued and available for installation on your mac. Page 3

4 Installing the certificate into your Mac Once you click on Install this certificate the certificate will be downloaded to your downloads folder and can be installed by double clicking on the file in that location. At this stage, the certificate attempts to install to your KeyChain to allow it to proceed please carry out the following. Click Add This adds the certificate and private key to your KeyChain and will allow for access to the curriculum site from an external location. Page 4

5 Exporting the certificate to a portable device and adding password protection to it. To transfer the certificate and private key to a home mac this needs to be exported from your work Keychain and imported to your home mac KeyChain as follows: Open KeyChain (located in the Other Group within Launchpad). Open the Certificates section of your KeyChain on your work mac and select the line containing Key from uujadc01.ad.ulster.ac.uk entry. Right click on the entry and select the Export Key option Page 5

6 Give the file a meaningful name and save to your desired location Enter a password of your choice to protect the file during transfer Click on the OK button to continue. Page 6

7 Enter your login password to confirm the KeyChain Export The file can now be transferred to a USB device to import to your home mac. Importing the Certificate to your home mac Open Keychain, select the Certificates category and choose Import Items from the File menu. Page 7

8 Locate your saved certificate You will be prompted for a password. This is the password you created previously to protect the exported file. Page 8

9 The certificate is now installed in your local keychain You should now be able to access from your home device. Page 9