Expired Certiciate Issue on my Mac for my HP Printer

[Tojsiab]

Hello Community, can someone help me figure out how to fix the expired certificate issue when I go to print from my Macbook. I tried the HP Smart App but it does not have the Advance Setting option to go into the EWS website?

[Repairatrooper]

Just type the IP address of your printer into the address bar of your browser, that will connect you to the EWS as well.

[Bufordw1]

I finally got my printer to work correctly by creating a certificate and installing it with keychain and setting it to always trust then uploading it to the printer. I was using the generic PCL driver but the color and quality wasn't very good.  I can now use the proper HP driver for my HP_Color_LaserJet_Pro_M478f_9f.  Follow the steps below and hopefully it will work for you as well.

CREATE THE REQ FILE.

1. Open textedit and paste the following:

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = xxxxxxx
ST = xxxxxx
L = xxxx
O = HP
OU = HP-IPG
CN = xxxxxxxxxxxxx.xxxxxx.xx.x.xxxx.xx
[v3_req]
keyUsage = digitalSignature, keyEncipherment, dataEncipherment, nonRepudiation
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1 = localhost
DNS.2 = 127.0.0.1

2. Open System Settings/Printers & Scanners

3. Select the HP printer with the expired certificate.

4. In the pop-up GUI select "Printer Queue..."

5. In this pop-up select "Show Printer Web Page..."

6. Do what you need to do to access the web page ie. answer security warning, login etc...

7. On the web page select "+Security/Certificates".

8. Under Printer Certificate section select "(view)" next to Staus: Installed.

9. In the Issuer and /or Subject block you will find the values for CN, L, ST, and C. Copy
these values to the textedit file replacing the xx's Ensure you maintain the space before and after the = in the text file.

10. After inputting all of the values in the textedit save the file as req.conf in a new folder on the desktop.

11. Open /System/Applications/Utilities/Terminal.app and cd to the folder on the Desktop. ie. cd Desktop/New_Folder <enter>

12. In terminal type/paste the following OpenSSL command then press <enter>. This will create key.pem and certificate.pem in the folder on the desktop: openssl req -x509 -nodes -days 6000 -newkey rsa:2048 -keyout key.pem -out certificate.pem -config req.conf -extensions 'v3_req'

13. In terminal type/paste the following OpenSSL command to get the P12 file used for the printer. Remember the password you input when running this command: openssl pkcs12 -inkey key.pem -in certificate.pem -export -out certificate.p12

INSTALL CERT ON MAC

1. Go to the Keychain Access App on your device.

2. Select "File/Import Items..."

3. Select the cert file that you created earlier.

4. Double click on the imported cert and expand the trust section

5. Set it to "Always Trust". Note: You may have to do this twice to get all of the selections.

 

INSTALL CERT ON PRINTER
1. On the printer webpage select "+Security/Certificates". Select the "Configure" button. 

2. Select "Import a Certificate and Private Key" then select "Next"

3. Select "Choose File" and navigate to the desktop folder created earlier. Select the .p12 file. then select "Upload"

4. In the Password section input the password used when you made the .p12 file in step 13 above.

5. Select "Mark private key as exportable". If you need to you will be able to export the cert from the printer at a later date.

6. Select "Finish".

You should be able to print now using the proper HP driver.  If you are using the generic driver remove and reinstall the printer on your Mac.