Installing Certificates

Introduction

This note describes how to install digital certificates and keys for use in common client applications.  Instructions are based on the following assumptions:

Web Browser	Operating System
Internet Explorer (IE) 5 (with the 128 bit encryption upgrade installed) Internet Explorer (IE) 5.5 or later	Windows 98 NT4 (workstation or server, SP4 or later) Win2K, XP

Background

A client certificate and private key may be provided in a file of type .pfx.  This file conforms to the PKCS#12 Personal Information Exchange Syntax Standard and is password-protected.  The format is recognised and understood by Microsoft browsers and requires no special installation utility for the versions supported above.

For Microsoft applications, the keys and certificates are stored in the Windows Registry.  Access to and use of the private key(s) can be password-protected - this should be enabled during installation (see Private Key Protection).

Additional files of type .cer or .p7b may be supplied. These files contain the certificate, only, in ASN.1 encoded format, which may be installed in a directory if required, or a client's local "contacts" folder.  A  .cer file contains only one certificate, whereas a .p7b file may contain a certificate chain (client certificate plus Issuing Authority certificates).

Installing Certificates for use with Microsoft Applications