Child pages
  • How to add a UWCA server cert to your browser
Skip to end of metadata
Go to start of metadata

Follow the instructions at How to create, retrieve, and add a UWCA personal cert to your local web server

Export the cert as a PFX file (VISTA)
  1. Open Microsoft Management Console on your machine (from Start|Run, type "mmc")
  2. Select File | Add/Remove snap-in
  3. Select "Certificates" and then click "Add"
  4. Select "Computer Account" and then "Next"
  5. Select "Local Computer" then "Finish";
  6. Click "OK"
  7. Expand Certificates | Personal | Certificates
  8. Right-click on the certificate you would like to add to your browser and select All Tasks | Export ...; you will get the export wizard
  9. Click "Next"
  10. Select "Yes, export the private key" and then "Next"
  11. Leave the default selection of .PFX and leave the default checkboxes (default is unchecked) and click "Next"
  12. Enter an easy-to-remember password and click "Next"
  13. Enter "{your netid}.cac.washington.edu.pfx" on your desktop as the filename (click the "Browse" button to specify your desktop or other known location for the file).
  14. Click "Next"
  15. Click "Finish"
Install the certificate in Firefox (tested with Firefox 3.0)
  1. Open Firefox
  2. Go to Tools|Options|Advanced
  3. Select the "Encryption" tab
  4. Click "View Certificates" button
  5. Select the "Your Certificates" tab
  6. Click "Import ..." button
  7. Select the ".pfx" file you saved to your desktop and click OK
  8. Enter the password and click OK; you should see a message that says you have successfully imported the certificate and its private key
Install the certificate in IE

On Windows, Google Chrome uses the same certificate store as IE. So, whatever you do for IE should work for Chrome.

(tested with IE7/8)

  1. Double-click on the .pfx file you created
  2. Click next
  3. Click next
  4. Enter password, leave default checkbox settings, click next
  5. Click next to automatically select store.
  6. Click finish

Or, alternatively ...

  1. Open IE7
  2. Go to Tools|Options|Content
  3. Click "Certificates"
  4. Make sure that the "Personal" tab is selected
  5. Click "Import..."
  6. Select the ".pfx" file that you saved to your desktop and click "Next"
  7. Enter the password, leave the default check boxes, and click "Next"
  8. Select the radio button "Place all certificates in the following store" and then select "Personal" if it is not already selected and click "Next"
  9. Click "Finish"; you should get a confirmation dialog

Or, alternatively ...
(tested on win7)

  1. From Start|Run, enter "mmc" and enter.
  2. File|Add/Remove Snap-in ...
  3. Select "Certificates" and then click "Add"
  4. Select "My user account" and click "Finish"
  5. Click "OK"
  6. Expand "Certificates - Current User|Personal|Certificates"
  7. Right click on "Certificates" folder and select "All Tasks|Import ..."
  8. Click "Next"
  9. Select the ".pfx" file that you saved to your desktop and click "Next"
  10. Enter the password, leave the default check boxes, and click "Next"
  11. Select the radio button "Place all certificates in the following store" and then select "Personal" if it is not already selected and click "Next"
  12. Click "Finish"; you should get a confirmation dialog

On Vista/Win7, it will not work to copy/paste the cert from personal to machine store or vice-versa. It will give you every indication that this is working, but your cert will not be correctly paired with the private key.

Install the certificate in Chrome(tested with Chrome 28.0.1500.95 m)
  1. Open Chrome
  2. Click menu (icon with 3 horizontal bars to the right of the address bar)
  3. Go to "Setttings"
  4. Click "Show advanced settings..." (at the bottom of the settings page)
  5. Scroll down until you see "HTTPS/SSL"
  6. Click "Manage certificates..." button below "HTTPS/SSL"
  7. Click "Import ..." button
  8. Select the ".pfx" file you saved to your desktop and click OK
  9. Enter the password, leave the default check boxes, and click "Next"
  10. Select the radio button "Place all certificates in the following store" and then select "Personal" if it is not already selected and click "Next"
  11. Click "Finish"; you should get a confirmation dialog
Test that your browsers can access the intended web service
  1. Navigate to a web service that requires a cert
  2. If you have your certificate installed correctly, your browser should prompt you for the certificate you would like to use
  • No labels