WISekey Managed PKI End-user Manual
Contents
1. Open Option window of the browser choose Security Devices WISekey Managed PKI End user Manual 20 30 x Options General Tabs Content Applications Privacy Security General Network Update Encryption Protocols kW Use SSL 3 0 if Use TLS 1 0 Certificat When a server requests my personal certificate C Select one automatically Ce Ask me every time Then click on Load button 1 Device Manager ioj x Security Modules and Devices Details Luke mom aANGG Internal PECS 11 Module Ea Generic Crypto Services og 2 Software Security Device Change Password 4 Chrismatcisse 4Builtin Roots Module Builtin Object Token Browse your PKCS11 driver and click OK 1 Load PKCS 11 Device ll x Enter the information for the module you want to add Module Name My Smartcard Now in the Device Manager window you can see your smart card WISekey Managed PKI End user Manual 21 30 Device Manager AMSS Internal PECS 11 Module status Generic Crypto Services Description Software Security Device Manufacturer 4Chrismatcsse HW Version Builtin Roots Module FW Version Builtin Object Token Label aly Smartcard Manufacturer o JohnDoe 1 Serial Number FW Version Click on Log In then enter your smart card PIN Password Required Value Not Logged In SCM Microsystems In SCM Microsystems In 0 0 0 0 John Doe A E T Europe B V 298540 02. Job title and company information can be updated as follows User Address Authentication Company Information Company ID 65 Company Name WISEKEY 5A Jobtitle Administrator pave Cancel 6 Certificate Enrollment Process To obtain a digital certificate you need to generate a certificate signing request CSR and then submit it to the WlSeKey via an online certificate registration form There are two types of forms for you based on the system configuration Online form You enter subject distinguished names and or subject alternative names and then submit your information The browser will automatically generate the certificate signing request for you Offline form You use your existing certificate signing request edit subject distinguished names and or subject alternative names loaded from the request and then submit the request Follow the steps below to submit your certificate signing request Choose Request menu and then click Request Certificate button Request Certificate Request List Request DN Submitted Resolution Status Commontamne John Doe Fri 14 Jan 2011 Fri 14 Jan 011 Issued EMail jdoea wisekey com 03 24 20 GMT 03 24 38 GMIT CommonMame ohn Doe Fri 14 Jan 2011 Fri 14 Jan 011 EMail jdoea wisekey com 03 20 50 GMT 03 22 09 GMT Commontamne John Doe Thu 13 Jan 2011 Thu 13 Jan 2011 EMail jdoeawisekey com County CH 04 38 57 GMT 04 39 14 GMT Commontamne John Doe Tue
3. WISekey Managed PKI End user Manual Date January 2011 Version 1 0 0 Authors WISeKey SA WISeKey S A World Trade Center II 29 route de Pr Bois CP 885 1215 Geneva Switzerland Tel 41 22 594 30 00 Fax 41 22 594 3001 Email info wisekey com www wisekey com TABLE OF CONTENTS L Aboni docu ei aaa aaaea AAEN 3 CO gl 4 a HNUn noe SSM PEC a ABE MEST Huss PET ORT HV7W Osa Des RaRNUY ST Be SEn OR SHOT SP eunst DH mpruPE eset ose mnOn DE int venE ES 3 je Ge d H 4 CREMER 4 e a EE 5 o 2 0002 Ue sg 0 E aaiae aeaa iina ri prince teen E E E 5 P Cerubcite Enrolment Process seenen 7 e EENEG 9 ime e eT hee LM EEN E A en nr Se ene Rr err one eee nen eres 9 B1 Using Microsol INiternel Explorer oren nes 11 A Mmm TCA Et EE 13 GM USME GOOre CITO E 15 BA Use Appie Sai TS 18 o Smarta Cermiitate Enrolmen srsai Eaa a ASA 19 91 Using Microsoft Internet Explor T eege taneous 19 Oe USING MOANA PITCIOX ran S 20 10 EEDA RENE E 23 Appendix A Microsoft Certificate Management sssussssnsusussnnununnnnununnnnununnnnununnnnununnnnununnnnunnnnnnnnnnnnnnnnnnnnnnnn nnan 25 Appendix B Mozilla Firefox Certificate Manager ssssssssssususnnnununnnnununnnnununnnnununnnnununnnnununnununnnnnnunannnnnnannnnnnnn annan 28 WISekey Managed PKI End user Manual 2 30 1 About this document This document describes the procedures for WlSeKey managed PKI end users to manage digital certificates Copyright No part of the contents of this docume
4. 0 0 0 SA Please enter the master password for the John Doe Lok ze k O x Log In Log Gut Next choose Request menu and then click Request Certificate button Enter subject DN and or SAN value choose High Grade and then click Generate Firefox will ask you to choose your smart card device Choose Token Dialog Please choaze a token Click OK it will take a while to generate the key pair Generating kKey pair R Generating key pair please wait WlSekey Managed PKI End user Manual 22 30 If the certificate is issued immediately then you click on the Install button in the Certificate Install page Ifthe certificate is issued after approval of your organization registration officer you must open Firefox in the machine you make the request view detail of the certificate and then click on Install See section 9 to know how to browse and view your certificates You might be asked to enter smart card PIN if you had closed the browser after you made the request If the certificate is installed successfully the message below will be shown A Tour personal certificate has been installed ou should keep a backup copy of this certificate 10 Certificate Management All of your certificates can be listed and viewed using the Certificate menu Below is a sample view of the page Certificate List Subject Effective Expiration Serial Number Status Display Use t
5. Managed PKI End user Manual 11 30 E certificates File ction view Help om 4 xE o EH Certificates Current User Issued To Issued By Personal Gert Post Root CA PTT Post Boot CA _ Certificates Trusted Root Certification 4uthe J Certificates JJ Enterprise Trust Intermediate Certification Guth Elo WISeKkey Global Root G4 CA DISTE WISekey Global Rook G4 CA Edno LIABILITY ACCEPTED c 97 VeriSign Inc NO LIABILITY ACCEPTED c97 VeriSign L E NetLack Uzleti Class B Tanusityanykiado MetLock Uzleti Class B Tanusitvanykiado E Revocation nett ock Kozjegyzoi Class 4 Tanusityvanykiado Net ock Kozjegyzoi Class 4 Tanusitvany Certificates NetLock Expressz Class C Tanusitvanykiado NetLock Expressz Class C Tanusityanyki Active Directory User Object 2 Microsoft Root Certificate Authority Microsoft Rook Certificate Authority Trusted Publishers E Microsoft Root Authority Microsoft Root Authority Untrusted Certificates E Microsoft Authenticodeitmi Root Authority Microsoft 4uthenticodettm Boot Authority Third Party Boot Certification A me SERVIDORES IPS SERVIDORES Trusted People http www valicert com ARKO aan valicerk corn Certificate Enrollment Requests http e valicert comi http ie valicerk Com m im sel ll Trusted Boot Certification 4ukhorities store contains 114 certificates Open Intermediate Certification Authorities Store the picture below depict that the certificate is in
6. Trust this CA to identify ema users Before trusting this CA for any purpose you should examine its certificate and its policy and procedures if available Examine C cerbticate Click OK and then do the same for the rest CA certificates of the WIlSeKey including o WlSeKey CertifyID Advanced G1 CA o WlSeKey CertifyID Advanced Services CA1 WlSekey Managed PKI End user Manual 30 30
7. follows WlSekey Managed PKI End user Manual 4 30 Choose a digital certificate Identification The Web site you want to view requests identification Please choose a certificate Issuer WiSekey CertifvID Advance John Doe WTSekey CertifvID Advance _ More Info view Certificate ok 4 Change Password You can change your password as follows Open My Profile menu Choose Authentication tab Choose Edit button Enter your new password and then click on Save User Address Company Authentication Form Authentication Login Password Login Title johndoe Edit 5 Update User Profile You can update your profile information including Personal information User tab Address Address tab Job title Company tab The User tab s interface to update personal information appears as shown below WlSekey Managed PKI End user Manual 5 30 User Address Company Authentication User Basic Information Title First Name Middle Nam Last Name Email Mobile National ID Passport No Driver Permit No UID Login Tite administrator Preferred Language English Status Active Cancel Address information can be updated as follows User Company Address Address Line 1 Route de Pr Bois 29 Address Line 2 Address Line 3 ip City Geneva State Country Phone Fax Cancel WlSekey Managed PKI End user Manual 6 30
8. 11 Jan 2011 Tue 11 Jan 2011 EMail jdoeiawisekey com Country CH 04 35 14 GMT 04 35 38 GMT Issued Issued Issued The certificate enrollment page should look like below for Microsoft Internet Explorer IE WlSekey Managed PKI End user Manual 7 30 Submit New Certificate Request Certificate Template Name PRA Advanced Subject Common Name John Doe Email jdoe wisekey com Title Organization Organizational Unit Country Other Options Cryptographic Service Provider Microsot Enhanced Cryptographic Provider v1 0 Key Size 2046 V Mark keys as exportable Ch certificate subscriber hereby agree to the terms and conditions of the CertifyID Subscriber Agreement and to comply with its provisions Below is the certificate enrollment page for non IE browsers Submit New Certificate Request Certificate Template Name PRA Advanced Subject Common Name John Doe Email jdoeG wisekey com Title Organization Organizational Unit Country bs Key Size High Grade V Mark keys as exportable Other Options C certificate subscriber hereby agree to the terms and conditions of the CertifyID Subscriber Agreement and to comply with its provisions As you see above For IE you need to follow the steps e Choose a Cryptographic Service Provider CSP WISekey Managed PKI End user Manual 8 30 e Key length is often fixed e Determine if the private key is exportabl
9. 96 Reguest ID 33 7 Status Active Details Issuer Country CH Organization Wlsekey OrganizationUnit Serial Number 1541737C000000000010 Valid From Thu 13 Jan 2011 20 14 46 GMT Valid Until Fri 13 Jan 2012 20 14 46 GMT Certificate Template PRA Advanced Certificate Subject Information Identifier Value Email jdoe wisekey com Common Name John Doe Select certificate format to download Select Format Base b4 encoded X 509 Select CA Certificate to download Choose Certificate WlSeKey CertifylID Advanced Sernices CA 1 ey Download Manage Your Certificate Download Install Renew Certificate Revoke IMPORTANT The certificate MUST be installed from the browser that was used to generate and submit CSR This means that it is unable to install certificate in Firefox if its CSR was generated by Microsoft Internet Explorer For Microsoft Windows Users each user in a Windows PC has its own user profile and personal certificate store This means that the user account to install the certificate MUST also be the same user account which generated its CSR these above requirements are also true fora RENEWED certificate Firefox has its own certificate stores Therefore if a certificate is installed in IE tt cannot be used in Firefox and vice versa lf you want to use the certificate in both Firefox and IE it should be exported from IE and then imported to Firefox or vice versa Please ask your certification authority for further i
10. Agreement and to comply with its provisions Below is how the certificate enrollment page looks like on non lE browsers WISekey Managed PKI End user Manual 19 30 Submit New Certificate Request Certificate Template Name PRA Advanced Subject Common Name John Doe Email jdoe wisekey com Title Organization Organizational Unit Country S Other Options Key Size High Grade I mark keys as exportable Oli C certificate subscriber hereby agree to the terms and conditions of the reement and to comply with its provisions Choose Cryptographic Service Provider for your Smart card The picture above uses SafeSign Provider Make sure that your smart card has been plugged and then click on Generate button You then will have to enter PIN The smart card will take a while to generate the key pair If the certificate is issued immediately then you click on the Install button in the Certificate Install page Ifthe certificate is issued after approval of your organization registration officer you must open Microsoft Internet Explorer in the machine you make the request view detail of the certificate and then click on Install See section 9 to Know how to browse and view your certificates 9 2 Using Mozilla Firefox Mozilla Firefox deals with the smart card directly via the PKCS11 library provided by your smart card provider In this document we use Safe Sign smart card driver Follow the steps below
11. EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE EE ed Pree rrr rrr RER ER EEE RER EE EE EE ER EE EEER EE EE EE ER EE EEEE EE EE EE ER EE EE ER EE EE EE ER EE EE EE EE EE E EE RES E EE EE ERR ERR EE E ERR E EE EE EE RER E EE EE E E EE ERR ERR E EE EE EE EE ER E EE EE EE E RER EE EE EE EE EE EE ER EE EE EE EE EE ER ER ee d IMPORTANT You should verify the certificate installation like the section 7 1 because Google Chrome also use system certificate stores as Microsoft Internet Explorer WlSekey Managed PKI End user Manual 17 30 8 4 Using Apple Safari Follow the steps below to install your digital certificate in Mac OS X 1 6 x Inthe Certificate Install or Certificate View page Choose DER encoded binary X 509 then download your certificate The Keychain Access program may be opened automatically If not you can double click on your certificate file downloaded to open it in the Keychain Access program Add Certificates EE Do you want to add the certificate s from the file Ze certificate169 cer to a keychain sl Keychain login ES _ View Certificates Cancel Add Click Add button Key Chain might require you to enter your password Now your certificate should be available in the Key Chain list and with status This certificate is valid iF Click to 2 login k Keychains Ri i ohn Doe
12. al Root GA CA The following number Thurmbprint shal 01951648 8E771FE5 26452EFE 89546845 ELSEBSCS Warning f you install this root certificate Windows will automatically trust any certificate issued by this CA Installing a certificate with an unconfirmed thumbprint is a security risk If you click Yes you acknowledge this risk Do you want to install this certificate Now certificate is in the certificate store D Issued To Issued By Expiration Date Cy Microsoft Root Certificate Authority Microsoft Root Certificate Author 5 10 2021 Cal NO LIABILITY ACCEPTED c 97 VeriSign Inc NO LIABILITY ACCEPTED c 97V 1 8 2004 a9 OTE Wihekey Global Root GA CA OTE Whekey Global Root GA CA 1 12 2026 Cal OISTE WiSeKey Global Root GA CA OISTE WiSeKey Global Root GA CA 12 11 2037 Cal Thawte Premium Server CA Thawte Premium Server CA 1 1 2021 d HI Appendix B Mozilla Firefox Certificate Manager This appendix describes how to open Firefox Certificate Manager and its certification stores The program can be opened with the following steps Open menu Tool Options Choose Advanced button in the Options window choose Encryption tab Use View Certificates button Your Certificates tab lists your entity certificates WISekey Managed PKI End user Manual 28 30 1 Certificate Manazer four Certificates People Servers Others Tou have cer
13. can be viewed on this computer e Sebhinngs Certificates The Certificate Management Program will appear as shown below WISekey Managed PKI End user Manual 25 30 E3 Certificates File Action View Help fe KR g SH Certificates Current User o Issued To Issued By Expiration D BR Personal te Doe WISeKey CertifyID Advanced Services CA1 1 15 2012 AL Certificates Fyjohn Boe WISeKey CertifyID Advanced Services CA 1 14 2012 Trusted Root Certification Du Certificates Enterprise Trust E Intermediate Certification AL Certificate Revocation Li Certificates 3 Active Directory User Object tA Personal store contains your certificates The Intermediate Certification Authorities CA store contains Issuing and Policy certification authorities Trusted Root Certification Authorities Root store contains Root Certification Authorities How to import a certificate into a certificate store is the same for all certificate stores Below is an example of how to import WISeKey Root CA Certificate Check if the certificate to import is available in the certificate store Download Root CA Certificate in Certificate Install or Certificate View page The Root CA certificate is often in the bottom of the CA certificate list Open Trusted Root Certification Authorities store Click Import button and follow the wizard Certificate Import Wizard Welcome to the Cert
14. di login Cengio J a Ge E Micr ertificates Chemo Issued by WiSeKey CertifylID Advanced Services CA 1 system el Expires Sunday January 15 2012 9 17 33 AM Switzerland Time This certificate is valid E System Roots Category Name Kind Date A All tems E John Doe certincate E p d ES OISTE WiSeKey Global Root GA CA certificate aSSWwords a E wiseKey CertifylID Advanced G1 CA certificate secure Notes WiSeKey CertifyiID Advanced Services CA 1 certificate WISekey Managed PKI End user Manual 18 30 9 Smartcard Certificate Enrollment The process to obtain a smart card certificate is quite similar to the certificate enrollment process in the section 5 However there are some differences depending on the browsers 9 1 Using Microsoft Internet Explorer Follow the steps below to enroll for a smart card certificate on Microsoft Internet Explorer IE Choose Request menu and then click Request Certificate button The certificate enrollment page should look like below Submit New Certificate Request Certificate Template Hamme PRA Advanced D Subject Common Mame Join Loe Email jdoeGiwisekey cam Title Organization Organizational Unit country Other Options Cryptographic Service Provider safesign Standard Cryptographic Service Provider ei Key Sire 2045 w Mark keys as exportable I certificate subscriber hereby agree to the terms and conditions of the CertifvyID Subscriber
15. e or not For Non lE browsers choose High Grade key size For Google Chrome The browser allows to generate the CSR but it does not support certificate installation Therefore do not use the Google Chrome browser Finally click on Generate button 7 Renew your certificate Your certificate can be renewed as follows Choose Certificate menu View the details of the certificate for renewal Click on the Renew button 8 Certificate Installation Your certificate will be issued after the submission of the certificate signing request CSR Some certificates are issued immediately and others require approval by an administrator You should be notified by email when your certificate is ready You can view the details of the certificate download or install it directly The certificate can be installed from the Certificate Install page if it is issued immediately The page includes the install button as follows Select certificate format to download Select Format DER encoded binary X 509 Manage Your Certificate Certificate details Download Install Select CA Certificate to download Choose Certificate WlSeKey CertifylID Advanced Services CA 1 The certificate can be also installed from the Certificate View page if it requires approval by certificate registration officers Below is a sample view of the page WlSekey Managed PKI End user Manual 9 30 Certificate details Identifying Information Certificate ID 2
16. ficates manually See Appendix B 8 3 Using Google Chrome Like Microsoft Internet Explorer the browser uses the personal certificate store of the Microsoft Windows and does not allow installing certificates directly You have to import the certificate manually You can export certificate from Firefox and then import it to Google Chrome Certificates installed by Microsoft Internet Explorer can be used by Google Chrome Registration Officer can help make a signing certificate request on behalf of you and you will receive the certificate from the officer Follow the steps below to import a certificate the certificate must be stored in PFX format including a private key From Run window command execute certmgr msc command and then choose Import menu like the picture below K Certificates LJ a Fie Action View Help gt Og pp a CH Certificates Current User Object Type E Darran al a Find Certificates i Authe There are no items to show in this view e TE Fo Find Certificates H E VIEW V Request New Certificate Refresh Export List Help WISekey Managed PKI End user Manual 15 30 Choose certificate file to import Kl Documents d My Computer Mu Recent Emy Network Places Documents Q oCSPCLient E Desktop Mu Documents 33 Mu Computer Mu Network Files of type Personal Information Exchange pfs p12 ze Enter the password to open the certifica
17. he view detail button in the display column to view the detailed information of a certificate WlSekey Managed PKI End user Manual 23 30 Certificate details Identifying Information Certificate ID 311 Request ID 359 Status Active Issuer Country CH Organization WilSekKey OrganizationU Serial Number 61E0BB4000000000001F Valid From Sat 15 Jan 2011 02 23 17 GMT Valid Until Sun 15 Jan 2012 02 23 17 GMT Certificate Template PRA Advanced Certificate Subject Information Identifier Value Email jdoe wisekey com Common Name John Doe Select certificate format to download Select Format Select CA Certificate to download Choose Certificate WiSekKey CertifylD Advanced Sernices CA 1 el Download Manage Your Certificate Download Renew Certificate Revoke WlSekey Managed PKI End user Manual 24 30 Appendix A Microsoft Certificate Management This appendix describes how to open the Certificate Management Program and its certification stores You can open the Certificate Management Program with the following steps Run certmgr command from Run window Cr i x f Type the name of a program folder document or Internet resource and Windows will open it for you Wl This task will be created with administrative privileges L ox JC Browse Click the Certificates button in the Content tab of the Internet Options window Internet Options Ratings help you control the Internet content that
18. ificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists from your disk to a certificate store A certificate which is issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network connections A certificate store is the system area where certificates are kept To continue dick Next WISekey Managed PKI End user Manual 26 30 Browse certificate file Certificate Store Certificate stores are system areas where certificates are kent Windows can automatically select a certificate store or you can specify a location for the certificate Automatically select the certificate store based on the type of certificate Place all certificates in the following store Certificate store Trusted Root Certification Authorities Next click Finish Completing the Certificate Import Wizard The certificate will be imported after you dick Finish You have specified the following settings Oe eee Trusted Root Certific Content Certificate Click Yes WlSekey Managed PKI End user Manual 27 30 Securty Warning You are about to install a certificate from a certification authority CA _ claiming to represent Windows cannot validate that the certificate ts actually from OISTE contacting OISTE WiseKey Glob
19. nd user Manual 12 30 Certificate General Details Certification Path Certification path fs OSTE WISekey Global Root GA CH fe WISekey CertifyID Advanced G1 CA IMPORTANT Root Certification Authority CA Certificate and intermediate CA certificates in the CA certificate chain should be automatically installed in the Windows XP In Windows 7 the OISTE WiSeKey Global Root GA CA certificate is also installed by the Microsoft Root Certificate Update Program Root CA Certificates that are not automatically installed by the Microsoft Root Certificate Update Program must be installed manually See the Appendix A If you get the following error message while installing a certificate in IE8 of Windows 7 Windows Vista Windows Server 2008 or Windows Server 2008 R2 then please install the hot fix 2078942 and try re installing the certificate ERROR MESSAGE An error occurred when installing your certificate It might be because that the Root Certificate of your entity certificate was unable to install Please download the CA chain and follow the instructions in the document below 8 2 Using Firefox Click Install button to install certificate If the certificate is installed correctly the following status message will be shown Your personal certificate has been installed You should keep a backup of this certificate Open Firefox personal certificate store to check if the certificate is installed c
20. nformation on the CA certificates that are linked to your certificate Below is a sample entire CA certificate chain that has been correctly installed in Microsoft Windows WlSekey Managed PKI End user Manual 10 30 Certificate a ahala Certification Path Certification path 3 OISTE WiSekey Global Root GA CA Je wizekeu CertifyID Advanced G1 CA Where OISTE WlSeKey Global Root GA CA Root CA Certificate WlSeKey CertifyID Advanced G1 CA Policy CA Certificate WlSeKey CertifyID Advanced Services CA 1 Issuing CA Certificate 8 1 Using Microsoft Internet Explorer Click Install button to install certificate If the certificate is installed correctly the following status message will be shown The Certificate is now installed and ready to be used Your installed certificate should be available in the personal certificate store as follows E3 certificates File Action View Help Hm A E ep f SH Certificates Current User Issued To Issued By Expiration Date m o lohn fe wiSeKey CertifyID Advanced Services CA1 1 14 2012 H Certificates Bohn Doe WiSekey CertifyID Advanced Services CA 1fl4feoi2 d Trusted Root Certification Autbell PER il Certificates Next we need to verify the installation of the certificate Follow the steps below Open Trusted Root Certification Authorities store the picture below depicts that the certificate is installed correctly WISekey
21. nt may be reproduced or distributed in any form or by any means without the prior written permission of WISeKey SA WIS key CartihyILD is a registered trademark of WISeKey SA W IS key is a registered trademark of WISeKey SA Microsoft MS are registered trademarks and Windows is a trademark of Microsoft Corporation Published in Geneva Switzerland by WISeKey SA Copyright 2008 WISeKey SA All Rights Reserved WlSekey Managed PKI End user Manual 3 30 2 Getting Started WISeKey provides a web based application for end users to manage certificates via URL below https secure certifyid com certifyid ura user Your administrator will create an account for you to logon the application in which you can Enroll for a certificate Install a certificate Manage certificates Update your profile Change your password 3 User Login The application provides two options for user authentication including Log into the application by your username and password Log into the application by a digital certificate This option can be used only after you successfully obtain a certificate The picture describes how to log into the application WIS key ae ad rs y nme l a Logon ID Password Certificate Logon Sign In You can click on Certificate Logon to log into the application by a digital certificate A window with a list of your digital certificates will be shown for you to choose as
22. orrectly as follows Open Options window of Firefox and click View Certificates WISekey Managed PKI End user Manual 13 30 z i H e el asa amp oag General Tabs Content Applications Privacy Secunty Advanced General Network Update Encryption Protocol Use SSL30 Use TLS 1 0 Certificates When a server requests my personal certificate Select one automaticaly ei Ask me every time View Certificates Revocation Lists Validation Security Devices Your personal certificates should be listed in the Your certificates tab 1 Certificate Manazer Your Certificates People Servers Authorities Others Tou have certificates from these organizations that identify you Certificate Hame Security Device Seral Number E WiSekey Next we need to verify the installation of the certificate If it was installed correctly then the certification chain of the certificate would look like below WISekey Managed PKI End user Manual 14 30 Certificate Viewer John Doe s Wiekey ID General Details Certificate Hierarchy H DISTE wiiekeu Global Root GA CA I WilSehey Ceti Advanced G1 LA H WS eker erbful Advanced Services LA IMPORTANT WlSeKey CA Certificates are built in certificates in Firefox so they should be always available in the certificate store of the browser Ifthe built in certificates are not available then you can install the certi
23. stalled correctly ES Certificates File Action View Help am Ap xB o EH Certificates Current User Issued To Issued By ses Personal E wisekey CertifyID Standard Gi CA OISTE WISekey Global Root G4 CA Jd Certificates E wisekey CertifyID Advanced Services CA 1 WiSekey CertifyID Advanced G1 CA Ve Root Certification Auth lt SEENEN WISeKey CertifyID Advanced G1 CA Deeg Dlatzeren CertfyID Advanced GI CA n OISTE WiSeKey Global Root GACA Intermediate Certification Authe SoMdsekey CertiryID Advanced GI CA GISTE WiSekey Global Root GA CA me Certificate Revocation List E verisign Class 2 CA Individual Subscriber Class 2 Public Primary Certification Authority G Certificates verisign Class 1 CA Individual Subscriber Persona Class 1 Public Primary Certification Quthority 1 Active Directory User Object jury DAT ACorp S6C Root SSC Authority 1 Trusted Publishers E Thawte Server CA Root 56C Authority 1 Untrusted Certificates Thawte Premium Server C Root SGC Authority 1 Third Party Root Certification Au EdSecureNet CA SGC Root Root SGC Authority Trusted People E Root Agency Root Agency Certificate Enrollment Requests Ems sac Authority Root SSC Authority E Microsoft windows Hardware Cormpatibility Microsoft Rook Authority Open Personal Certificate Store and then open your certificate if all the certificates were installed correctly then the certificate view would look like below WISekey Managed PKI E
24. te file and then choose Personal certificate store Certificate Import Wizard Certificate Store Certificate stores are system areas where certificates are kept Windows can automatically select a certificate store or you can specify a location For O Automatically select the certificate store based on the type of certificate Certificate store Personal Browse KS el Click Next and then Finish to complete the wizard Open Google Chrome options then click Manage Certificates WISekey Managed PKI End user Manual 16 30 Google Chrome Options Basics Personal Stuff Under the Hood ou have chosen to open certain file types automatically after downloading You can Clear these settings so that downloaded files don t open automatically Clear aubo opening settings Web Content Change the default font and language for webpages _ Change font and language settings Gears Change Gears settings Security Select trusted SSL certificates Computerwide SSL settings Lise SSL 2 0 Check for server certificate revocation P eset to defaults Your certificate is now listed in the Personal certificate store Certificates Intended purpose lt 4 gt E Trusted Root Certificatior 4 1 gt Intermediate Certification Authorities Personal Other People Issued To Issued By Expiratio Friendly Name Pree EE EE EE EE EE EE ERR EE
25. tificates from these organizations that identify you Certificate Hame Security Device Seral Number Expires On Authorities tab consists of the CA certificates 1 Certificate Manazer Your Certificates People Servers Authorities Others Tou have certificates on file that identify these certificate authorities Certificate Mame Security Device Wells Fargo WrelleS ecure WeallsSecure Public Root Certificate Auth Builtin Object Token WlGek eu Ceti Advanced Services C Software Secunty Device OISTE wWliekeu Global Root GA CA Software Security Device WlGekeu Cert Advanced G1 CA Software Security Device E Ramp Security Services Inc Ramp Global Certification Authority Builtin Object Token WlSekey Managed PKI End user Manual How to install a CA certificate is described below Check if the certificate to import is available in the certificate store From the Certificate Install or Certificate View page choose a CA certificate to install and then select DER encoded binary X 509 as format to download Click download below the CA certificate list Firefox will automatically install the certificate after downloading it A popup window will be shown as follows Downloading Certificate Tou have been asked to trust a new Certificate Authority L4 Do you want to trust DISTE WiSekey Global Root GA CA for the following purposes Trust this CA to identify web sites
Download Pdf Manuals
Related Search