Expired Certificate: new certificate not working

[GavinOleg]

Hello!

I have the HP OfficeJet Pro 8020 series and it’s saying the certificate is expired — despite it not being expired. For context I’m using a Mac laptop to troubleshoot. I’ve done what every guide and forum has says:

- checked date and time (it’s current and correct)

- configured a new self-signed certificate and verified it’s been updated. (Shut printer off).

- checked for updates - up to date.

- reset network settings.

- did a cold restore just in case.

- also restarted all devices trying to print just in case.

I’m not sure if the issue is that I have to create a certificate request an install it directly rather than doing a self signed. I can successfully download the certificate requests but am unsure of where to go from there. I can’t open them properly in my keychain, or install them to the printer webpage. 

if anyone has any advice it would be greatly appreciated. 

[Hawks_Eye]

Hi @GavinOleg 

Welcome to the HP Support Community! We're here to help you get back up and running.

I can imagine how frustrating it feels to see the certificate error persist even after all the careful steps you’ve already taken. You’ve been very thorough, and I appreciate the effort you’ve put in. 

Let’s go through a few more precise steps that can help resolve this situation.

 

Use the Printer’s Embedded Web Server (EWS)

• Open a browser on your Mac and type the printer’s IP address in the address bar.
• Navigate to the Networking → Advanced Settings → Certificates section.
• Delete the existing certificate and generate a new self‑signed certificate directly from the EWS.
• Restart the printer and reconnect.

Install the Certificate on macOS Keychain

• After generating the new certificate from the printer’s EWS, download it.
• Double‑click the certificate file to open it in Keychain Access.
• Add it to the System keychain and set it to Always Trust.
• Restart your Mac and test printing again.

Check HTTPS Settings

• In the printer’s EWS, ensure HTTPS is enabled under the security settings.
• If HTTPS is disabled, enable it and apply the new certificate.

Try HP App Instead of HP Smart

• On macOS, install the HP App from the Mac App Store.
• Link: HP App – Mac App Store
• Add your printer again and test scanning/printing. This ensures compatibility with newer certificate handling.

Firmware Update via EWS

• Even if the printer shows up‑to‑date, check manually through the EWS under Tools → Printer Updates.
• Sometimes the certificate handling is improved in newer firmware builds.

Alternative Certificate Import

• If you prefer not to use self‑signed certificates, you can generate a certificate signing request (CSR) from the printer’s EWS.
• Submit the CSR to a trusted Certificate Authority (CA).
• Once you receive the signed certificate, upload it back into the printer’s EWS under the certificate management section.

You’ve already done an excellent job covering the basics. At this stage, the most effective path is to generate and install the certificate directly through the printer’s Embedded Web Server, then trust it in macOS Keychain.

This ensures the printer and your Mac are aligned on secure communication.

If my response helped, please mark it as an Accepted Solution! ✅ It helps others and spreads support. 💙 Also, tapping "Yes" on "Was this reply helpful?" makes a big difference! Thanks! 😊

Take care, and have an amazing day!

Regards, 

Hawks_Eye