Visit Nexus to get an overview of Nexus' solutions, read customer cases, access the latest news, and more.

This article describes how to to set up a connection between a Smart ID Certificate Manager (CM) client and a CM host. This has to be done before any tasks can be performed in the CM client. Do this every time the connection shall be established between a CM client and a CM host. This task is done in Administrator's workbench (AWB).

Expand/Collapse All


You must be an administration officer with the role Use AWB to establish a connection between a CM client and a CM host.

Step-by-step instruction

  1. Insert your card, containing the certificate used to establish you as an officer, into one of the card readers attached to the AWB.
  2. The Connect to CM dialog box appears. If not, select File > Connect...
  3. In the dialog box, select one of the most recent CM hosts or enter a CM host name or IP address.
  4. If your CM client has to access the CM host via a proxy, do the following:
    1. In the dialog box, check Proxy.
    2. Select the proxy type (HTTP (TLS tunnel) or Socks).

    3. Specify Host name and Port number of the proxy.

    4. If authentication is required by the proxy, check Authentication and enter User ID and Password.

  5. When you are finished with the Connect to CM dialog box, click OK.
  6. During the TLS negotiation, which now takes place, the host sends its server certificate. If the CM client does not recognize the issuer of this certificate, the TLS Negotiation Resolution dialog box will appear.
  7. In the dialog box, click More… to see a display of the detailed certificate information.
  8. Click Yes to accept the certificate and to store it in the root file. This dialog step is omitted if the server certificate already exists in the root file.
  9. The host now requests a certificate for authentication of the administration officer. The certificates available on your smart card are presented in the Security dialog box.
  10. Select the correct certificate from the list and enter the corresponding PIN code. Click OK.

The secure connection is now established and the AWB window is displayed.