Wiki source code of TumzertifikatInstallieren

Last modified by wikibot on 2023/02/05 20:30
Show last authors
1
2
3 {{toc/}}
4
5
6
7 = 1. TUM Certificate =
8
9 == 1. Importing the certificate ==
10
11 === 1.1. Thunderbird ===
12
13 ==== 1.1.1. Importing the certificate ====
14
15 To import the certificate to Thunderbird you need to open the '**Preferences'** in Thunderbird.
16
17
18
19 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Inbox - Mozilla Thunderbird_preferences_NEU.jpg|| width="300" height="346" alt="Inbox - Mozilla Thunderbird_preferences_NEU.jpg"]]
20
21
22
23
24
25
26 Here you choose '**Erweitert**' and select '**Manage Certificates**'.
27
28
29 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Thunderbird Preferences_manage-certicates.jpg|| width="566" height="491" alt="Thunderbird Preferences_manage-certicates.jpg"]]
30
31
32
33
34
35
36 Then you select '**Import**'.
37
38
39
40
41 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Certificate Manager_thunderbird_import1.jpg|| width="728" height="393" alt="Certificate Manager_thunderbird_import1.jpg"]]
42
43
44 {{html wiki="true"}}
45 <sticky> </sticky>
46 {{/html}}
47
48
49
50
51
52
53
54
55 Here you navigate to the certificate to import and select it.
56
57
58 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Certificate File to Import_1.jpg|| width="727" height="542" alt="Certificate File to Import_1.jpg"]]
59
60
61
62
63
64
65 Now enter your chosen password.
66
67
68 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Password Required_thunderbird_dfnpin.jpg|| width="494" height="151" alt="Password Required_thunderbird_dfnpin.jpg"]]
69
70
71
72
73
74
75 If you entered the correct password you see the following window.
76
77
78 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Alert_certificate_installed.jpg|| width="608" height="129" alt="Alert_certificate_installed.jpg"]]
79
80
81
82
83
84
85
86 Now your certificate gets listed in '**Your certificates**'.
87
88
89 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Certificate Manager_thunderbird_import2.jpg|| width="752" height="403" alt="Certificate Manager_thunderbird_import2.jpg"]]
90
91
92
93
94
95
96
97
98 ==== 1.1.2. Add a new identity ====
99
100 To sign and encode from the @tum.de mail address you need to add a new identity. Therefore you open the '**Preferences'** in Thunderbird.
101 **{{html wiki="true"}}
102 <span class='WYSIWYG_COLOR ' style='color:Red'>Attention:</span>
103 {{/html}}** @ma.tum.de don't need to do this.
104
105
106 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Inbox - Mozilla Thunderbird_account_settings.jpg|| width="299" height="346" alt="Inbox - Mozilla Thunderbird_account_settings.jpg"]]
107
108
109
110
111
112
113 The following screenshot shows the settings for the @in.tum.de account you are adding the identity for.
114
115
116 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Account Settings_manage_identities.jpg|| width="716" height="665" alt="Account Settings_manage_identities.jpg"]]
117
118
119 Here you click on '**Add**'.
120
121 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Identities_add.jpg|| width="477" height="187" alt="Identities_add.jpg"]]
122
123
124
125
126
127
128
129 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/New Identity_2.jpeg|| width="658" height="679" alt="New Identity_2.jpeg"]]
130
131
132
133
134
135
136 ==== 1.1.3. Edit the identity ====
137
138
139
140
141
142
143 You now need to select the certificate for the new identity. For this you select the new identity and click on '**Edit**'.
144
145
146 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Identities_edit.jpg|| width="482" height="194" alt="Identities_edit.jpg"]]
147
148
149
150
151
152
153
154
155 Then you select for **Digital Signing** and **Encryption** your certificate.
156
157
158 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Edit selectzertifikat1.jpg|| width="658" height="681" alt="Edit selectzertifikat1.jpg"]]
159
160
161
162
163
164
165
166
167 Finally you click on **OK**.
168
169
170 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Edit maxmustermannidentitycertauswählen.jpg|| width="662" height="682" alt="Edit maxmustermannidentitycertauswählen.jpg"]]
171
172
173
174
175
176
177 ==== 1.1.4. Signing and encryption of Emails ====
178
179 The following screenshot shows a encrypted E-Mail. If there is a key visible in the bottom of the windows the email will be sent encrypted. The letter symbol means it will be sent signed.
180
181 **{{html wiki="true"}}
182 <span class='WYSIWYG_COLOR ' style='color:Red'>Important:</span>
183 {{/html}}** You need to always sign your emails if possible. Only if a email is signed you can ensure that the email is from the person saying they sent the mail and still contains the intended data. Sensitive data should be encrypted so third persosn can't read them.
184
185
186 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/thunderbirdverschlmail.jpg|| alt="thunderbirdverschlmail.jpg"]]
187
188
189
190
191
192
193
194
195
196 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Write: Test_2.jpg|| width="799" height="404" alt="Write: Test_2.jpg"]]
197
198
199
200
201
202
203
204
205 By clicking **View Security Info**you can inspect the informations about the sender's certificate.
206
207
208 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Write: Test_security_info.jpg|| width="799" height="404" alt="Write: Test_security_info.jpg"]]
209
210
211
212
213
214
215
216
217 [[image:/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/Message Security_thunderbird_jpg.jpg|| width="602" height="416" alt="Message Security_thunderbird_jpg.jpg"]]
218
219
220
221
222
223
224
225 === 1.2. Apple Mail Programm ===
226
227 ==== 1.2.1. Import certificate ====
228
229
230
231
232
233
234
235 The TUM certificate was saved without file extension. You should first add the extension **.p12** so it can be handled correctly.
236
237
238 Now you open the certificate.(Double click)
239
240
241 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/11.zertifikatinkeychainimportierenneu.png|| alt="11.zertifikatinkeychainimportierenneu.png"]]
242
243
244
245
246
247
248 In the pop up window you enter the password you entered when saving it in firefox.
249
250
251 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/222.backuppassworteingebenneu2.png|| alt="222.backuppassworteingebenneu2.png"]]
252
253
254
255
256
257
258 Then the certificate is saved in **Keychain Access**. You can open this application via **Applications -> Utilities**.
259
260
261 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/33.keychaintumzertifikatneu.png|| alt="33.keychaintumzertifikatneu.png"]]
262
263
264
265
266
267
268 Once the certificate is saved into the Keycain Access it's able to be used by Apple Mail.
269
270
271
272
273
274
275 ==== 1.2.2. Add new identity ====
276
277 Now you should add an alias address to Apple Mail. Therefore open the Preferences.
278
279
280 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/1.macmaileinstellungen.png|| style="font-family: -webkit-standard;" alt="1.macmaileinstellungen.png"]]
281
282
283
284
285
286
287
288
289 Open the context menu and select **Edit Email Addresses**.
290
291
292 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/2.macmailaccountinformation.png|| style="font-family: -webkit-standard;" alt="2.macmailaccountinformation.png"]]
293
294
295
296
297
298
299
300
301 In the new window click '**+**' and enter email address and name. Finally click onto '**OK**'.
302
303
304 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/3.macmaileditemailadress.png|| style="font-family: -webkit-standard;" alt="3.macmaileditemailadress.png"]]
305
306
307
308
309
310
311
312
313
314 The new email address for the certificate was added.
315
316
317 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/44.applemailnewidentity2.png|| style="font-family: -webkit-standard;" alt="44.applemailnewidentity2.png"]]
318
319
320
321
322
323
324 ==== 1.2.3. Signing and encrypting emails. ====
325
326 If you want to encrypt an email with the TUM certificate you need the just created email address in the context menu of **From**.
327
328
329 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/mactumzertverschlemail.png|| style="font-family: -webkit-standard;" alt="mactumzertverschlemail.png"]]
330
331
332
333
334
335
336 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Intern/TumCert/WebHome/mactumzertverschlemail2.png|| width="709" height="328" style="font-family: -webkit-standard;" alt="mactumzertverschlemail2.png"]]
337
338 === 1.3. Apple - Outlook 2019 ===
339
340 [[Here>>Informatik.Helpdesk.TumEmail]] is shown how you can set up the email account for the TUM email address.
341
342
343
344 First click Outlook in the tab, then **Preferences**.
345
346
347 [[image:outlookpreferences.png||width="900"]]
348
349
350
351
352
353
354 Select **Accounts**.
355
356
357 [[image:accounts.png||width="900"]]
358
359
360
361
362
363
364
365 Then select your RBG (in.tum/ma.tum) account in the open window on the left and click **Advanced**.
366
367
368 [[image:zerttumadvanced.png||width="900"]]
369
370
371
372
373
374
375
376 Click on the Security tab and select the RBG certificate for signing and encrypting the emails.
377
378
379 [[image:Screenshot 2020-06-19 at 09.39.12-certnotselected.png||width="900"]]
380
381
382
383 [[image:Screenshot 2020-06-19 at 09.14.46-chooseacertificate.png||width="900"]]
384
385
386
387 [[image:Screenshot 2020-06-19 at 09.15.04-certauswaehlen.png||width="900"]]
388
389
390
391
392
393
394
395 Confirm your selection with **OK**.
396
397
398 [[image:Screenshot 2020-06-19 at 09.13.31-certausgewaehltok.png||width="900"]]
399
400
401
402
403
404
405
406 === 1.4. Windows- Outlook 2019 (for the TUM email address, without a new identity) ===
407
408 [[Here>>Informatik.Helpdesk.TumEmail]] is shown how you can set up the email account for the TUM email address.
409
410
411
412 ==== 1.4.1.Import certificate ====
413
414 Open Outlook and select **File**
415
416
417 [[image:EN1.png||width="900"]]
418
419
420
421
422
423
424 And then select **Options**
425
426
427 [[image:options_EN2.png||width="1000"]]
428
429 [[image:Out1.png||width="900"]]
430
431
432
433
434
435
436 Select the **Trust Center** and click on the button **Trust Center Settings**.
437
438
439 [[image:EN3.png||width="900"]]
440
441
442
443
444
445
446 In the next **Trust Center** window, select **Email Security** on the left.
447
448
449 [[image:EN4.png||width="900"]]
450
451
452
453
454
455
456 In the right section of the **Digital IDs (Certificates)** area, please select **Import/Export**. In the window that opens, click on **Browse**.
457 Please select the correct certificate and confirm with **OK**. Now you return to the view **Import/Export Digital IDs**, please enter the password you have assigned during the export process from Firefox. Then give the certificate a name and confirm with **OK**.
458
459
460 [[image:EN5.png||width="900"]]
461
462
463
464
465
466
467 ==== 1.4.2.Signing and encrypting e-mails ====
468
469 Your certificate has been imported into Outlook and you can select it under **Encrypted e-mail messages** by clicking on the Set **settings** button for the e-mail address.
470
471
472 [[image:EN6.png||width="900"]]
473
474
475
476
477
478
479 Now you should see under **Signature Certificate** and **Encryption Certificate** the certificate that you have just installed. If this is not the case, you still have to select the certificate by clicking the **Select** button.
480
481
482 [[image:EN7.png||width="900"]]
483
484
485
486
487
488
489 Here you can see the issuer of the certificate and its expiry date.
490
491
492 [[image:EN8.png||width="900"]]