for esigntrust Personal Secure Enrollment and Generation Guide Operation Guide Microsoft Windows System & Internet Explorer Users

Transcription

1 esigntrust Personal Secure Enrollment for and Generation Guide Microsoft Windows System & Internet Explorer Users Operation Guide version. OGXP-SC-EN Copyright Macao Post esigntrust Certification Services, 2009 All rights reserved.

2 CONTENTS PART I : Personal Secure Certificate Enrollment & Generation Page. 3 PART II : How to search an Electronic Certificate Page. 15 PART III : How to revoke an Electronic Certificate Page. 19 PART IV : How to Install Macao Post Root CA Certificate Page. 22 2/28

3 P A R T 1 How to enroll a Personal Secure Certificate Please use Internet Explorer 6.0 or above as your browser, and check your security settings: 1. After you received the certificate Passcode ID and Passcode, you can access to start the enrollment and generate the certificate. Please use a Windows account that has the installation right such as Administrator and Use Internet Explorer 6.0 or above as the web browser. 2. The subscriber can choose the preferred language e.g Chinese, Portuguese and English. 3/28

4 3. The subscriber can press the Enroll button which links to the enrollment form. 4/28

5 4. In the enrollment page, please fill in the information according to the field required. If the page reminds you to run the following ActiveX Control: Microsoft Certificate Enrollment Control, please click a mouse button in the message bar and click Run Add-on. Click Run button after the confirmation dialog is prompted. 5/28

6 Fill in the information according to the field required. Operation Guide For 5. Challenge Phrase is the unique password defined by the subscriber. It is used to protect the Electronic certificate. It is also required during revocation of the certificate. Therefore, remember not to pass it to other person. 6/28

7 6. After pressing the submit button, the address reconfirmation notice will be popped up for confirmation. 7/28

8 7. After confirmed the address, another message will pop up to remind you that the website is requesting a new certificate on your behalf and ask you to reconfirm. 8/28

9 8. During certificate generation, the system would request the subscriber to set the security level. Press Set Security Level to choose the right choice for you 9/28

10 9. Middle level security, no password is needed. You can choose middle level security, subscriber choosing this option means no password is needed for using the certificate. However if other person who can use your computer can also access your certificate. It is not recommended. 10/28

11 10. High level required user define password. High level means high security level, the certificate will be protected by password. User has to input password when using the certificate. 11/28

12 11. After setting the password, a pop up notice will request your confirmation on adding the certificate into your computer. Please choose Yes to accept it. 12/28

13 12. Once you accept, the certificate will be created and you can see the detail of the certificate in the webpage. 13. At the same time, the certificate has been installed in your Window system, the user can access the certificate through the content field in Internet Option of Tools menu. 13/28

14 14. The certificate will be stored in the Personal field. The user can access the content of the certificate and use it to sign and encrypt Certificate information 14/28

15 P A R T 2 How to search an Electronic Certificate Other usage: 1. User can access the link for other purposes such as search and revoke certificate. 15/28

16 2. For searching a certificate, user has to input address to search. 3. Once the certificate is listed, you can click the highlight name to view the content of the certificate. 16/28

17 4. The content of the certificate includes: Name Status Validity Class of Certificate Subject Serial Number If other people want to send you an encrypted , the person can search your certificate here and make use the public key inside of your certificate to encrypt the to you. 17/28

18 5. Download certificate, the person has to choose the suitable format for him or her. 6. After pressed the Submit button, the certificate will be retrieved and can be saved in you computer. 18/28

19 P A R T 3 How to revoke an Electronic Certificate 1. Revoke a certificate 19/28

20 2. Please input address. 3. Once the certificate is listed, you can click the highlight name to view the content of the certificate. 20/28

21 4. The content of the certificate will be shown and press Revoke Button. 5. To revoke the certificate, the user has to input the challenge phrase which the user defined during certification enrollment. Once submit, the certificate will be revoked and it cannot be used. 21/28

22 P A R T 4 Install Macao Post Root CA & Macao Post Secur CA 1. The certificate is signed by the Macao Post Root CA certificate. User has to install Macao Post Root CA certificate before it can be completely verified in the certification path. 2. Click the link INSTALL MACAU POST ROOT CA for installing Macao Post Root CA certificate and click the link INSTALL MACAU POST SECUR CA for installing Secur CA certificate. Both installation mentions are the same. 22/28

23 3. A Pop Up message will be showed up to ask your confirmation on saving the required Macao Post Root CA Certificate MPRootCA.cer. Choose save the file in your desktop or direct open it. 4. Double click the MPRootCA.cer file, and choose open. The certificate will be show up. 23/28

24 5. Choose Install Certificate, the Certificate Import Wizard can be started. Press Next 24/28

25 6. Choose Automatically select the certificate store based on the type of certificate. 7. Press Finish 25/28

26 8. Then the message The import was successful will be showed up. 9. Check the root certificate in the certificate store in IE. After all Macao Post Root Certificate and Secur CA certificate has been installed, subscriber can check the Macao Post Root certificate in the field of Trusted Root Certification Authorities without error. 26/28

27 10. After installing all the Macau Post Root Certificates, the complete certificate path of your certificate can be verified. 27/28

28 Contact Us Enquiry and Support Tel :(853) Fax :(853) Enquiry Customer Support Business Hours :Monday to Friday 9:00am 6:00pm Saturday 9:00am 1:00pm -- The End -- 28/28