A Certificate Authority (CA) issues client certificates used in authentication. In order to authenticate a user, a CA certificate is needed.
This article describes how to add certificate authority, server certificate, and client certificate for the Smart ID Digital Access component administration interface.
Prerequisites
-
The certificate authority, server certificate, and client certificate files must be available.
Step-by-step instruction
-
Log in to Digital Access Admin with an administrator account.
Add certificate authority
-
In Digital Access Admin, go to Manage System.
-
Click Certificates > Add Certificate Authority...
-
Check Enable Certificate Authority.
-
Enter a Display Name used to identify the certificate authority.
-
Browse to and select the certificate authority file.
-
Decide if revocation control shall be used or not.
-
Click Finish.
Add server certificate
-
In Digital Access Admin, go to Manage System.
-
Click Certificates > Add Server Certificate...
-
Enter a Display Name used to identify the server certificate.
-
Browse to and select the server Certificate file.
-
Browse to and select the server Key file.
The key must be in PKCS#8 format.
See also Extract certificate and private key from a pkcs12 container in Digital Access.
-
If the information is encrypted, enter Password.
-
Make other selections if applicable.
-
Select the created CA Certificates.
-
Click Save.
Add client certificate
-
In Digital Access Admin, go to Manage System.
-
Click Certificates > Manage Client Certificate Settings...
-
Enter a Display Name used to identify the client certificate.
-
Browse to and select the client Certificate file.
-
Browse to and select the client Key file.
-
If the information is encrypted, enter Password.
-
Click Save.
Select server certificate for access point
-
In Digital Access Admin, go to Manage System.
-
Click Access Points.
-
Add or edit an access point.
-
In Server Certificate, select the server certificate you just added.
-
Click Save.