You are here: Foswiki>Informatik/Helpdesk Web>Zertifikataufmobilemgeraeteinrichten (11 Feb 2021, ZlatinaGanchevaGa94vad)Edit Attach

Setting up a certificate on a mobile device

iPhone

Install certificates from the DFN Website

So that your certificate can be validated, you have to install the 3 DFN CA certificates. To do this, open the DFN-Webseite with the web browser of your iPhone. Now install the following CA certificates one by one.

Root certificate:

Open the root certificate and install it on your iPhone.

Screenshot 2020-04-15 at 20.49.10.png

Screenshot 2020-04-15 at 20.25.54.png

DFN-PCA certificate (G2):

Open the DFN-PCA certificate (G2) and install it on your iPhone.

Screenshot 2020-04-15 at 20.49.10.png

dfnverein.png

CA-Certificate:

Open the CA certificate and install it on your iPhone.

Screenshot 2020-04-15 at 20.49.10.png

Screenshot 2020-04-15 at 20.31.24.png

Sending the certificate to your iPhone and installing it

Here you will find instructions on how to export the certificate.

You can copy the certificate to your mobile phone via email. To do this, send yourself an e-mail with the certificate.

emailcert.png

Open the certificate in the attachment and install it on your mobile phone.

Screenshot 2020-04-15 at 22.53.40.png

For the password, enter the certificate backup password that you selected when you exported the certificate.

Screenshot 2020-04-15 at 22.09.30.png

You can see installed profiles (certificates) on the iPhone under SettingsGeneralProfiles.

IMG 1716.PNGneu.PNG

In order to be able to use the certificate, you have to assign it to your mail account. Open SettingsPasswords and Accounts and select your e-mail account.

Then click on Advanced and select your certificate for signing and encrypting. If you only want to sign the e-mails, you can leave Encrypt by default deactivated.

Screenshot 2020-04-15 at 22.14.19.png

iPad

Download the certificate to your iPad and install it

Here you will find instructions on how to export the certificate. You can copy the certificate to your iPad via email. To do this, send yourself an e-mail with the certificate.

Open the attachment of the e-mail and select Save to files under Settings in the top right corner.

ipadzertifikat1.png

Click on the saved certificate to save it in Profiles.

ipadzertifikat2.png

Go to SettingsGeneralProfiles and select the certificate there and click Install.

ipadzertifikat3.png

Then first enter the device password and then the password that you selected during export. Note: If you did not enter a password when exporting the certificate, you can ignore this step.

ipadzertifikat4.png

Similarly to the I-Phone, the 3 root DNF Certificates must be additionally installed on the device, so that the user can be verified. ipad 3 Certificates.png
ipad 3 Certificates

Signing and encrypting Emails with a Certificate

To be able to use the certificate for signing and encrypting, you have to assign it to your mail account. Open SettingsMailAccounts and select your e-mail account (in this case we have Exchange).

image.png

After that you have to activate the option for signing and encryption. Click on your mytum Email AccountAdvanced Settings

image(1).png

Two options must be visible under S/MIME: Sign and Encrypt. First select Sign.

image(2).png

Under Certificates you can select your verified certificate. Now take a step back and do the same for Encrypt

image(3).png

How to send a signed and encrypted e-mail

Note: Please make sure that your device is up-to-date! You should also restart your device.

After you have activated the S/MIME options, you should be able to send and receive signed e-mails. You can check whether an email is signed as follows:

If this approved character is present, it means the email is signed.

email signed.png

Before you can encrypt e-mails, you must first exchange signed e-mails with your correspondent so that you can receive his/her certificate.

When you click the email address with an approved character, you should see the following menu: image(4).png

You must then download it and install it. After you have installed it successfully, you should be able to send out encrypted e-mails. If the e-mail is encrypted, it should look as follows:

send encrypted email.png

Android

FairEmail

You must first set up an in.tum account or TUM account on your mobile phone, if you do not already have one. Then send yourself the certificate by email and save it on your mobile phone.

Here you will find instructions on how to export the certificate.

Then open the Settings and select Manage on the Main Settings page under ”Set up Account”. Then click on your email account.

Screenshot 2020-04-21 at 15.58.43.png

Click on Client Certificate and in the opened window select Install Certificate.

Screenshot 2020-04-21 at 15.36.19.png

Select the certificate on the mobile phone that you want to install and enter the passphrase for the certificate. You can rename the certificate. Then click OK. Then click select the certificate and click SELECT.

Note: If you did not enter a passphrase when exporting the certificate, you can ignore this step.

Screenshot 2020-04-21 at 15.37.26.png

Select the encryption method

Under SettingsEncryption you can set that the e-mails are automatically encrypted if you have the public key of the recipient who has a valid S/MIME certificate. You can change this setting each time you send an e-mail.

Screenshot 2020-04-21 at 16.21.52.png

Manage public keys

To send an encrypted e-mail, you need the recipient's public key. To do this, the recipient must either send you a signed email or you must save the recipient's public key on the mobile phone.

Signed E-Mail

When you have received a signed e-mail, click on the signature symbol to save the public key. After this step it will be possible to write an encrypted email to this recipient.

WhatsApp Image 2020-04-02 at 14.09.24a copy.jpeg

Adding new public key

Open Settings, then select Encryption in the tab and click on Manage public keys on the page and then click on the + sign to add public keys. You can then close the Settings.

Screenshot 2020-04-21 at 16.34.12.png

Send signed and / or encrypted email.

We have activated automatic encryption and signing in the settings, which is why Encrypt is displayed at the bottom of the program. If the recipient has a valid S/MIME certificate and their public key is stored in the program, the email can be sent encrypted. Otherwise you will get the following error message: No public key for. …. @ ….

Click on Encrypt and select how the e-mail should be sent.

Note: If automatic encryption is disabled, ”Sign” it will appear at the bottom of the program.

Screenshot 2020-04-21 at 16.42.41.png

Topic attachments
I Attachment Action Size Date Who Comment
account_activate_sign.PNGPNG account_activate_sign.PNG manage 366 K 22 Dec 2020 - 15:33 ZlatinaGanchevaGa94vad  
account_encrypt.pngpng account_encrypt.png manage 374 K 22 Dec 2020 - 15:35 ZlatinaGanchevaGa94vad  
accounts_exchange.pngpng accounts_exchange.png manage 307 K 22 Dec 2020 - 15:27 ZlatinaGanchevaGa94vad  
account_smime.pngpng account_smime.png manage 400 K 22 Dec 2020 - 15:31 ZlatinaGanchevaGa94vad  
dfnverein.pngpng dfnverein.png manage 203 K 15 Apr 2020 - 18:45 AyseguelOmusNe63guq  
eccount_setup_advanced.pngpng eccount_setup_advanced.png manage 390 K 22 Dec 2020 - 15:30 ZlatinaGanchevaGa94vad  
emailcert.pngpng emailcert.png manage 115 K 15 Apr 2020 - 21:14 AyseguelOmusNe63guq  
email_signed.pngpng email_signed.png manage 141 K 22 Dec 2020 - 16:41 ZlatinaGanchevaGa94vad  
exchange_mytum.pngpng exchange_mytum.png manage 356 K 22 Dec 2020 - 15:30 ZlatinaGanchevaGa94vad  
image(1).pngpng image(1).png manage 692 K 22 Dec 2020 - 16:21 ZlatinaGanchevaGa94vad  
image(2).pngpng image(2).png manage 431 K 22 Dec 2020 - 16:22 ZlatinaGanchevaGa94vad  
image(3).pngpng image(3).png manage 443 K 22 Dec 2020 - 16:23 ZlatinaGanchevaGa94vad  
image(4).pngpng image(4).png manage 220 K 22 Dec 2020 - 16:52 ZlatinaGanchevaGa94vad  
image.pngpng image.png manage 519 K 22 Dec 2020 - 16:20 ZlatinaGanchevaGa94vad  
IMG-0502.PNGPNG IMG-0502.PNG manage 344 K 22 Dec 2020 - 13:12 ZlatinaGanchevaGa94vad ipad_certificates
IMG_1690.PNGneu.PNGPNG IMG_1690.PNGneu.PNG manage 31 K 15 Apr 2020 - 18:04 AyseguelOmusNe63guq  
IMG_1699.PNGneu.PNGPNG IMG_1699.PNGneu.PNG manage 49 K 15 Apr 2020 - 18:33 AyseguelOmusNe63guq  
IMG_1701.PNGneu.PNGPNG IMG_1701.PNGneu.PNG manage 83 K 15 Apr 2020 - 20:27 AyseguelOmusNe63guq  
IMG_1705.PNGneu.PNGPNG IMG_1705.PNGneu.PNG manage 65 K 15 Apr 2020 - 18:36 AyseguelOmusNe63guq  
IMG_1711.PNGneu.PNGPNG IMG_1711.PNGneu.PNG manage 231 K 15 Apr 2020 - 20:06 AyseguelOmusNe63guq  
IMG_1716.PNGneu.PNGPNG IMG_1716.PNGneu.PNG manage 99 K 15 Apr 2020 - 20:16 AyseguelOmusNe63guq  
ipad_3_Certificates.pngpng ipad_3_Certificates.png manage 344 K 22 Dec 2020 - 13:27 ZlatinaGanchevaGa94vad ipad_certificates
ipad_3_Certificates.PNGPNG ipad_3_Certificates.PNG manage 344 K 22 Dec 2020 - 13:14 ZlatinaGanchevaGa94vad  
ipadzertifikat1.pngpng ipadzertifikat1.png manage 114 K 20 Apr 2020 - 14:24 AyseguelOmusNe63guq  
ipadzertifikat2.pngpng ipadzertifikat2.png manage 99 K 20 Apr 2020 - 14:24 AyseguelOmusNe63guq  
ipadzertifikat3.pngpng ipadzertifikat3.png manage 291 K 20 Apr 2020 - 14:25 AyseguelOmusNe63guq  
ipadzertifikat4.pngpng ipadzertifikat4.png manage 256 K 20 Apr 2020 - 14:25 AyseguelOmusNe63guq  
itumcereinstell.pngpng itumcereinstell.png manage 101 K 15 Apr 2020 - 21:04 AyseguelOmusNe63guq  
keychainauswaehlen.pngpng keychainauswaehlen.png manage 180 K 15 Apr 2020 - 19:32 AyseguelOmusNe63guq  
keychainexport.pngpng keychainexport.png manage 342 K 15 Apr 2020 - 19:37 AyseguelOmusNe63guq  
keychainpasswd.pngpng keychainpasswd.png manage 77 K 15 Apr 2020 - 19:37 AyseguelOmusNe63guq  
keychainsave.pngpng keychainsave.png manage 478 K 15 Apr 2020 - 19:37 AyseguelOmusNe63guq  
mail_accounts.pngpng mail_accounts.png manage 438 K 22 Dec 2020 - 15:26 ZlatinaGanchevaGa94vad  
Screenshot 2020-04-15 at 20.08.41aa.pngpng Screenshot 2020-04-15 at 20.08.41aa.png manage 499 K 15 Apr 2020 - 18:29 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.18.20aaa.pngpng Screenshot 2020-04-15 at 20.18.20aaa.png manage 191 K 21 Apr 2020 - 15:06 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.25.54.pngpng Screenshot 2020-04-15 at 20.25.54.png manage 255 K 15 Apr 2020 - 18:32 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.27.06.pngpng Screenshot 2020-04-15 at 20.27.06.png manage 202 K 15 Apr 2020 - 18:34 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.31.24.pngpng Screenshot 2020-04-15 at 20.31.24.png manage 203 K 15 Apr 2020 - 18:37 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.39.32.pngpng Screenshot 2020-04-15 at 20.39.32.png manage 199 K 15 Apr 2020 - 18:41 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 20.49.10.pngpng Screenshot 2020-04-15 at 20.49.10.png manage 253 K 21 Apr 2020 - 15:06 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 22.09.30.pngpng Screenshot 2020-04-15 at 22.09.30.png manage 231 K 21 Apr 2020 - 15:06 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 22.14.19.pngpng Screenshot 2020-04-15 at 22.14.19.png manage 288 K 21 Apr 2020 - 15:06 AyseguelOmusNe63guq  
Screenshot 2020-04-15 at 22.53.40.pngpng Screenshot 2020-04-15 at 22.53.40.png manage 119 K 21 Apr 2020 - 15:07 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 15.36.19.pngpng Screenshot 2020-04-21 at 15.36.19.png manage 293 K 21 Apr 2020 - 14:09 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 15.37.26.pngpng Screenshot 2020-04-21 at 15.37.26.png manage 507 K 21 Apr 2020 - 14:14 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 15.58.43.pngpng Screenshot 2020-04-21 at 15.58.43.png manage 545 K 21 Apr 2020 - 14:07 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 16.21.52.pngpng Screenshot 2020-04-21 at 16.21.52.png manage 580 K 21 Apr 2020 - 14:22 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 16.34.12.pngpng Screenshot 2020-04-21 at 16.34.12.png manage 794 K 21 Apr 2020 - 14:34 AyseguelOmusNe63guq  
Screenshot 2020-04-21 at 16.42.41.pngpng Screenshot 2020-04-21 at 16.42.41.png manage 490 K 21 Apr 2020 - 14:47 AyseguelOmusNe63guq  
send_encrypted_email.pngpng send_encrypted_email.png manage 77 K 22 Dec 2020 - 17:05 ZlatinaGanchevaGa94vad  
sign_choose_certificate.pngpng sign_choose_certificate.png manage 399 K 22 Dec 2020 - 15:34 ZlatinaGanchevaGa94vad  
WhatsApp Image 2020-04-02 at 14.09.24a copy.jpegjpeg WhatsApp Image 2020-04-02 at 14.09.24a copy.jpeg manage 59 K 21 Apr 2020 - 14:36 AyseguelOmusNe63guq  
Topic revision: r13 - 11 Feb 2021, ZlatinaGanchevaGa94vad
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding Foswiki? Send feedback