Add certificates in Digital Access

A Certificate Authority (CA) issues client certificates used in authentication. In order to authenticate a user, a CA certificate is needed.

This article describes how to add certificate authority, server certificate, and client certificate for the Smart ID Digital Access component administration interface.

Prerequisites

The certificate authority, server certificate, and client certificate files must be available.

Step-by-step instruction

Log in to Digital Access Admin

Log in to Digital Access Admin with an administrator account.

Add certificate authority

In Digital Access Admin, go to Manage System.
Click Certificates > Add Certificate Authority...
Check Enable Certificate Authority.
Enter a Display Name used to identify the certificate authority.
Browse to and select the certificate authority file.
Decide if revocation control shall be used or not.
Click Finish.

Add server certificate

In Digital Access Admin, go to Manage System.
Click Certificates > Add Server Certificate...
Enter a Display Name used to identify the server certificate.
Browse to and select the server Certificate file.
Browse to and select the server Key file.

The key must be in PKCS#8 format.

See also Extract certificate and private key from a pkcs12 container in Digital Access.
If the information is encrypted, enter Password.
Make other selections if applicable.
Select the created CA Certificates.
Click Save.

Add client certificate

In Digital Access Admin, go to Manage System.
Click Certificates > Manage Client Certificate Settings...
Enter a Display Name used to identify the client certificate.
Browse to and select the client Certificate file.
Browse to and select the client Key file.
If the information is encrypted, enter Password.
Click Save.

Select server certificate for access point

In Digital Access Admin, go to Manage System.
Click Access Points.
Add or edit an access point.
In Server Certificate, select the server certificate you just added.
Click Save.