Client Private Key and Certificate Installation | |
Root Certificate Installation |
Netscape does not support the use of separate certificates for signing and encryption (otherwise known as Dual Certificate support). This separation is widely regarded to be good practice, and should be taken advantage of wherever possible through the use of email applications such as Outlook98 that do support dual certificate operation, together with certificates that are themselves restricted to either encryption or signing operations.
Before you can use Netscape for sending signed email and receiving encrypted
e-mail, you need to install your digital certificate. To do this:
|
|
Under the "Advanced option select the "Manage Certificates" | |
Select the tab "Your certificates" and Click on "Import" option. | |
In the file selection window navigate to the appropriate file containing the certificate and private key. Click "Open" when ready. | |
Depending on whether you are using your security store for the first time will depend on the exact content of dialogue box presented. If this is the first time you will need to set the password of the certificate store, otherwise enter your master password. | |
In the password entry dialogue box enter the password used to encrypt the file containing the certificate and private key. Click "OK". | |
A message will appear confirming success Click "OK" |
|
A view of Your Certificates will appear, showing the newly imported key and
certificate. Highlight the new certificate and click "View". A window similar to that shown will appear. Click "OK" to close the window. |
|
The Issuing Authority's Root Certificate will very likely have been installed into
Netscape along with your certificate. This is required by Netscape in order to trust
certificates issued by the Issuing Authority (including your own). You can check the Root Authority certificate is installed via the "Authorities" tab, under "Certificate Manager". This will bring up a scrollable list of root certificates for Issuing Authorities, that have been installed into Netscape. Locate and select the root certificate of the Issuing Authority you are interested in, and click "Edit" Note: |
The Issuing Authority's Root Certificate will very likely have been installed into Netscape along with your own certificate. This root certificate is required by Netscape in order to trust certificates issued by the Issuing Authority (including your own). If you cannot find the Issuing Authority's root certificate in your "Signers" store, it may not have been supplied with your user certificate. In that case, you need to go to the Issuing Authority's web site and download the certificate from there.
At the Issuing Authority's web site, there should be a clearly labelled link that
enables you to download the root certificate.
To get the real root certificate for these Digital Certification Services
click here and follow the simple steps below
Click on this CA Certificate link to bring up the window shown: Ensure the "Trust this CA to identify web sites" and "Trustis this CA to identify email users" option are both selected. Click "OK" to continue. |
|
Copyright © Trustis Limited 2010. All
Rights Reserved
This document is licensed for use only in conjunction with the use of Trustis Trust
Services