1. Support Center
  2. Documentation
  3. Desktop editions
  4. Getting started
  5. Configure Burp Proxy to work with an external browser
  6. Installing Burp's CA certificate
  7. Safari

Installing Burp's CA certificate in Safari

Before attempting to install Burp's CA certificate, make sure that you have successfully confirmed that the proxy listener is active and have configured your browser to work with Burp

Note: If you previously installed a different CA certificate generated by Burp, you should remove it before installing a new one.

To install Burp's CA certificate in Safari, proceed as follows:

With Burp running, visit http://burpsuite in Safari. You should be taken to a page that says "Welcome to Burp Suite Professional". If not, please refer to the proxy troubleshooting page. Depending on what went wrong, you may be taken there automatically.

In the top-right corner of the page, click "CA Certificate" to download your unique Burp CA certificate. Take note of where you save this.

Safari download CA certificate

Open the "Keychain Access" application in MacOS and go to the "Certificates" folder.

Drag-and-drop the downloaded certificate to copy it into the certificates list.

Safari copy certificate to keychain

In "Keychain Access", double-click the entry for "PortSwigger CA". In the dialog that opens, expand the "Trust" section and select the option "Always trust". Enter your password if required.

Restart Safari. With Burp still running, try and browse to any HTTPS URL. If everything has worked, you should now be able to browse to the page without any security warnings.

Safari edit trust settings

Removing Burp's CA certificate from Safari

To remove Burp's CA certificate from Safari:

  1. Open the "Keychain Access" application.
  2. In the left-hand side bar, select "login".
  3. From the list of items, find and right-click on the entry for "PortSwigger CA".
  4. From the context menu, select "Delete PortSwigger CA" and then restart Safari.