Important Information Regarding GC Web Certificate Updates

Updated September 14, 2010

Every two years, ITS updates its webserver certificates to ensure the proper functioning of secure web transactions. This is transparent to users. Every 10 years, the provider of those certificates (in this case, IPSCA) must update their root certificate. That process affects all their customer's web servers, including ours. Thus, ITS will be updating all of the IPSCA web certificates for all GC web services that require authentication. This will affect all GC web pages that require you to put in your GC username and password, with the exception of mail.goshen.edu. All GC owned computers in GC offices and labs will be fixed automatically by ITS. However, home users and students will need to take steps to fix their personal computers.

Once ITS applies the new root certificates on GC's servers, when you attempt to go to a GC web page that requires you to log in (such as GC Online, or Moodle) on your home/personal computer you will receive an error message about the web page's certificate being invalid. Also, if you use an email program on your home/personal computer (such as Thunderbird, Mac Mail, Eudora, or any other email program) you will also encounter errors while trying to send or receive email. ITS will apply the new root certificates to GC's servers on Monday, December 28. We are asking that you follow the below instructions to fix your home/personal computer as soon as possible prior to the 28th to avoid any support issues. Please follow the appropriate directions below to fix your home/personal computer.

For Windows users, there are 2 steps to this process:
STEP # 1 - Running Windows Update
STEP # 2 - Updating your Web Browser Certificate

For Mac users, there are 2 steps to this process:
STEP # 1 - Updating the MAC OS system with the new root certificate
STEP # 2 - Updating your Web Browser Certificate (This is for Firefox. If you are using Safari, you do not need this step.)

For iOS (iPhone, iPod Touch, iPad) Users, there is 1 step to this process.

WINDOWS USERS STEP # 1 - Running Windows update

Windows Vista and Windows 7 users will need to run Windows Update on their home computers.

1. Click on the Start button and click on Windows update (or open Internet Explorer and go to http://www.update.microsoft.com ).
Note: When running Windows Update, some users may be prompted to install ActiveX Control. ActiveX Control is an add-on that Internet Explorer uses to work properly with Windows Update. If you are prompted to install ActiveX Control, go ahead and install it.

2. Windows update will scan your computer to see if there are any necessary updates. if your computer needs the required update for the root certificate, it will be available for you to choose to install. If it is not available, then your computer most likely already has that update.

3. You are now ready to proceed to STEP # 2.

Windows XP users will need to run Windows Update on their home computers using the following instructions. Note: When running Windows Update, some users may be prompted to install ActiveX Control. ActiveX Control is an add-on that Internet Explorer uses to work properly with Windows Update. If you are prompted to install ActiveX Control, go ahead and install it.

1. Click on the Start button and click on Windows Update (or open up Internet Explorer and go to http://www.update.microsoft.com ).

2. Windows update will scan your computer to see if there are any necessary updates. When it is finished, click on the Custom button.

3. On the left side of the screen, click where it says "Software, Optional"

4. Click the box next to "Update for Root Certificates [November 2009] (KB931125)" so that you put a check mark in the box.

5. Click where it says "Review and Install Updates"

6. Windows has now been updated with the new root certificate. You are now ready to proceed to STEP # 2

top

WINDOWS USERS STEP #2 - Update Your Web Browser Certificate

Firefox Users Follow These Steps:

1. Click here to download the web certificate file.
2. Click to put a check mark in all three of the "Trust this CA..." boxes.
3. Click on OK.

4. Your web browser is now updated with the new certificate.
Note: If you receive a message that this certificate is already installed, you can ignore this step.

top

Internet Explorer Users follow these steps:

1. Click here to download the web certificate file.
2. Click on Open
3. Click on Install Certificate

4. Click on Next
5. Click on Next
6. Click on Finish

7. Your web browser is now updated with the new certificate.
Note: If you receive a message that this certificate is already installed, you can ignore this step.

top

MAC USERS STEP 1 - Updating the operating system with the root certificate

1. Right click here (or Ctrl+click) and choose "Save Link As" to download the root certificate file (called IPS-IPSCABUNDLE.CRT)
2. Double click to open the file. It will open with Keychain.
3. Drop the "Keychain box down to select "System" and click OK.