Difference between revisions of "Exporting a client certificate from Firefox"

From SNIC Documentation
Jump to: navigation, search
m (Add categories and "up" link.)
(Reformat in similar style to the other cert export docco pages.)
Line 5: Line 5:
 
[[Exporting_a_client_certificate|< Exporting a client certificate]]
 
[[Exporting_a_client_certificate|< Exporting a client certificate]]
  
To use the Terena certificates with the ARC grid client they have to be exported from the browser and converted into a suitable format. To export and convert a certificate installed the following procedure can be used:
+
Firefox uses its private built-in certificate store.
  
1. Export the installed certificate in the PKCS12 format. On Mac OSX, select both the private key and the certificate by clicking them while holding the apple key, then right click one of them and select "Export 2 items..." and save as DELETE_ME.p12 in a good location. In Firefox this is accomplished from the '''Options -> Advanced -> Encryption''' or '''Edit -> Preferences -> Advanced -> Encryption''' Dialog (depending on OS/Version), shown below:
+
* Open the ''Encryption preferences'' dialog in the Firefox browser by navigating ''Options -> Advanced -> Encryption'' or ''Edit -> Preferences -> Advanced -> Encryption'' depending on OS/Version. This should open a window similar to the one shown below.
  
 
[[File:browser1.png|400px]]  
 
[[File:browser1.png|400px]]  
  
To show all installed certificate click on the "View Certificates" buttton. This will shown the following dialog:
+
* To show all installed certificate click on the ''View Certificates'' buttton. This will shown the following dialog:
  
 
[[File:browser2.png|400px]]
 
[[File:browser2.png|400px]]
  
To backup your newly created certificate select the Terena certificate and click on the "Backup" button in the previous dialog. This brings up a dialog for selecting a filename and location for the certificate. Save your certificate as DELETE_ME.p12 in a good location. The file with be given the extension .p12 indicating that it is a PKCS12 certificate. When the location has been selected another dialog is shown asking for a export password. This password will protect the certificate and private key. As shown in the next figure:
+
* The export operation is called ''Backup'' in Firefox.
 +
 
 +
* Select your certificate and click on the ''Backup'' button in the previous dialog. This brings up a dialog for selecting a filename and location for the certificate.
 +
 
 +
* Select a location and filename for the exported certificate. The file with be given the extension ''.p12'' indicating that it is a PKCS12 certificate.
 +
 
 +
When the location has been selected another dialog is shown asking for a export password, as shown in the next figure:
  
 
[[File:browser3.png|400px]]
 
[[File:browser3.png|400px]]
  
Use the password quality meter to choose a strong password for the exported certificate and private key. In Chrome the procedure is pretty much identical except that the "Export..." button is found by going to the Chrome Settings, clicking "Under the Hood" in the sidebar and then the "Manage Certificates..." button.
+
* Enter and remember a password to protect the file with, you'll need this to access it later. Use the password quality meter to choose a strong password for the exported certificate and private key.

Revision as of 13:55, 22 May 2013

< Exporting a client certificate

Firefox uses its private built-in certificate store.

  • Open the Encryption preferences dialog in the Firefox browser by navigating Options -> Advanced -> Encryption or Edit -> Preferences -> Advanced -> Encryption depending on OS/Version. This should open a window similar to the one shown below.

Browser1.png

  • To show all installed certificate click on the View Certificates buttton. This will shown the following dialog:

Browser2.png

  • The export operation is called Backup in Firefox.
  • Select your certificate and click on the Backup button in the previous dialog. This brings up a dialog for selecting a filename and location for the certificate.
  • Select a location and filename for the exported certificate. The file with be given the extension .p12 indicating that it is a PKCS12 certificate.
  • When the location has been selected another dialog is shown asking for a export password, as shown in the next figure:

Browser3.png

  • Enter and remember a password to protect the file with, you'll need this to access it later. Use the password quality meter to choose a strong password for the exported certificate and private key.