System Prerequisites

In order to use all TANRC eServices for Accrediation and Endorsement Holders, which include DRDIS, AEVS for Accreditation and Endorsement Holders, VMS, MSS, eRevUp2, Accredicard Management, and the Operating Standards Search System, your system must meet the following requirements:

• TANRC Root Certificates must be properly installed
• Your browser must be the latest supported version of Firefox, Safari, or Microsoft Edge/Internet Explorer
• A Windows Operating System supporting the latest version of .NET Framework (for Windows Clickonce Client Applications Only)

For TANRC eServices that are available to the general public, which include all services offered on the TANRC eServices Public Portal, only the latest supported version of a modern web browser is required.

Purpose of TANRC Root Certificate

Because of the nature of computer security and the ability to control trust, despite the availability and cheap pricing of commercial SSL certificates, TANRC and its programs have decided to continue to use our internal certificate infrastructure for security. This decision was made for several reasons, mostly because TANRC requires higher levels of security with its regulated computer systems than commerical SSL certificate vendors are able to support.

Installing the TANRC Root Certificate will not cause any harm to your computer. The certificate is like a reference book to your computer in order for it to help validate the validity of the purported TANRC managed application you are trying to connect to. As it is like a reference book, it is only used by your computer to look up the validity of a service when you want to connect to our servers. The certificate is just a cryptographic key, nothing more.

Instructions on Installation of the Root Certificate

Manual instructions (Windows):

The following instructions will make your computer function properly with TANRC eServices with Windows, Windows "Add a Network Location", Internet Explorer, Microsoft Edge, and Google Chrome. For Mozilla Firefox, you will need to follow seperate instructions.

1. Download the Certificate file by clicking here
2. Right-click on "Start" and select "Run". (In Windows 10, you can also type "Run".)
3. When the Run dialog comes up, type in "mmc" and click on "OK".
4. On the "User Account Control" screen, click on "Yes." (This may or may not be applicable to your system, depending on your IT department's settings.)
5. Once the Microsoft Management Console opens, click on "File" and select "Add/Remove Snap-in".
6. In the left menu, select ‘Certificates’ and click on 'Add'.
7. On the next screen, click the radio button next to "Computer account" and click on "Next".
8. Click on "Finish".
9. Once you have returned the. To add or Remove Snap-ins and screens, click on "OK".
10. In the Microsoft Management Console window, click on "Certificates (Local Computer)".
11. Right-click on the "Trusted Root Certificate Authorities" in the left pane and select "All Tasks" and then "Import".
12. Click "Next" in the "Certificate Import Wizard".
13. Browse to where you saved the Securly certificate and select it. Then click on "Open".
14. In the Certificate Store window, ensure that it says "Trusted Root Certificate Authorities" and click on "Next".
15. Click on "Finish" and then "OK".
16. You should see the TAN2000 International Holdings Corporation certificate showing in the certificates folder at this point.

You may need to restart the browser after installing a Root Certificate, otherwise the web sites will fail to validate. Alternatively, you can restart your computer.

Manual instructions (macOS):

You will need to follow the instructions on how to add a certificate to a keychain via Keychain Access on a Mac. Be sure to add to the System keychain. How To Add Certificates to a keychain on Mac

After completing the operation to add the certificate to a keychain, you then need to manually change the trust settings to ensure that all certificates issued by TANRC are trusted. You will need to, at a minimum, set Always Trust for Secure Sockets Layer (SSL) and Secure Mail (S/MIME). If you are accessing a facility secured by TANRC AccrediCards, it is also advisable to set Extensible Authentication Protocol (EAP) to Always Trust, as well. How to Change Trust Settings on a Certificate in Keychain Access

You may need to restart the browser after installing a Root Certificate, otherwise the web sites will fail to validate. Alternatively, you can restart your computer.