V1.0 Andre Henney July 2011

Transcription

1 SAPO - Backup or Transfer of Digital Certificate 1. Introduction Digital certificate (DC) can be backed-up or transferred in various ways; this document serves as a how to to enable a person(s) to complete such a task(s). Describe in the section below is the suggested solutions to DC backup and transfer. Doccumentt Verrssi ion Conttrrol l Verrssi ion No.. Autthorr((ss)) Datte V1.0 Andre Henney July 2011 Document Name: SAPO - Backup or Transfer of Digital Certificate 1

2 Backup: When installing a DC, make sure that you tick the following: Enable strong encryption. (Protecting your private key) Mark this key as exportable. (Backup and Transfer of keys) see Figure 1 below. Figure 1: Certificate Properties In the case where a DC has been installed and the original DC is lost, the installed DC can still be exported provided that at the time of first installation, the private key was marked as exportable as described in Figure 1 above. The following steps will illustrates how to export your certificate from an existing or installed DC. This only applies if the user has Internet Explorer installed. Document Name: SAPO - Backup or Transfer of Digital Certificate 2

3 Step 1: Open Internet Explorer and navigate to the Tools tab. Click on Tools and navigate to the Internet Options. Double Click on Internet Options to open. Step 2: In the Internet Options window, navigate to the Contents tab, click to open Contents. Then Click on the Certificate button to view all the certificates installed in Internet Explorer. Document Name: SAPO - Backup or Transfer of Digital Certificate 3

4 Step 3: Click on the Certificate that you wish to export and click on the Export button. Step 4: The export wizard will open and then click next. The following screen will appear, tick the option Yes, export the private key. Then click next. Document Name: SAPO - Backup or Transfer of Digital Certificate 4

5 Step 5: In the next screen, as shown below: Personal Information Exchange - PKCS #12 (.PFX) format. Choose the additional following options: Select "Include all certificates in the certification path if possible" Select "Enable strong protection" Clear "Delete the private key if the export is successful" (this is not recommended) Then click next. Step 6: When prompted, create and enter a strong password and click next. Document Name: SAPO - Backup or Transfer of Digital Certificate 5

6 Step 7: Enter the name of the file you are exporting. Choose the location and filename destination where you want to export your certificate and click next. Step 8: Click Finish. Document Name: SAPO - Backup or Transfer of Digital Certificate 6

7 Transfer: Solution 1 Removable Storage: Once a DC is received from the SAPO, copy the DC onto a removable storage device such as a flash drive, thumb drive or external hard disk. This will enable the DC to be moved between computer(s) or other devices for its intended use. Disadvantage: If the removable device becomes corrupted or lost the DC will be corrupted as well. Solution 2 Permanent Storage: Once a DC is received from the SAPO, write the DC to permanent storage such as a CD. This will enable the DC to be moved between computer(s) or other devices for its intended use. Disadvantage: The proper hardware (CD-ROM) should be installed on the computer on which the DC is to be installed. Solution 3 Online Storage Many websites and organizations offer online storage to their customers or staff. Disadvantage: Internet connection to online storage required. Document Name: SAPO - Backup or Transfer of Digital Certificate 7