A Certificate Authority (CA) issues client certificates used in authentication. In order to authenticate a user, a CA certificate is needed.
This article describes how to add certificate authority, server certificate, and client certificate for the Smart ID Digital Access component administration interface.
Prerequisites
- The certificate authority, server certificate, and client certificate files must be available.
Step-by-step instruction
Log in to Digital Access Admin
- Log in to Digital Access Admin with an administrator account.
Add certificate authority
- In Digital Access Admin, go to Manage System.
- Click Certificates > Add Certificate Authority...
- Check Enable Certificate Authority.
- Enter a Display Name used to identify the certificate authority.
- Browse to and select the certificate authority file.
- Decide if revocation control shall be used or not.
- Click Finish.
Add server certificate
- In Digital Access Admin, go to Manage System.
- Click Certificates > Add Server Certificate...
- Enter a Display Name used to identify the server certificate.
- Browse to and select the server Certificate file.
Browse to and select the server Key file.
The key must be in PKCS#8 format.
See also Extract certificate and private key from a pkcs12 container in Digital Access.
- If the information is encrypted, enter Password.
- Make other selections if applicable.
- Select the created CA Certificates.
- Click Save.
Add client certificate
- In Digital Access Admin, go to Manage System.
- Click Certificates > Manage Client Certificate Settings...
Enter a Display Name used to identify the client certificate.
Browse to and select the client Certificate file.
Browse to and select the client Key file.
If the information is encrypted, enter Password.
Click Save.
Select server certificate for access point
- In Digital Access Admin, go to Manage System.
- Click Access Points.
- Add or edit an access point.
- In Server Certificate, select the server certificate you just added.
- Click Save.
