wiki.in.tum.de
Technische Universität München



RBG User-Certificates

This describes how to apply for and install the RBG certificate.

0. General Information on TUM Informatics and Mathematics Certificates

After requesting a certificate you can find it under:
$HOME/../home_sec/import/

or on ssp.in.tum.de (Students or Informatics Employees), ssp.ma.tum.de (Mathematics Employees), if you requested it before. Note : Here you will find further information about identity checks.

With a certificate you can visit certain websites or even send and read encrypted E-Mails. The certificate can also be used to digitally sign files. For the installation the passphrase is needed, since the certificate is encrypted. After getting your passphrase, your certificate can be found under the mentioned directory or on ssp.in.tum.de (students and Informatics employees) / ssp.ma.tum.de (Mathematics employees).

Note : The certificate that is downloaded via SSP is a .pem file. This file is not recognized by some programs (e.g. Outlook). To make your certificate 'recognizable', look in Chapter 5.


1. Where and how do I request a certificate?

1.1. Students

Students receive the passphrase and the RBG account information at the preliminary courses at Infopoint Informatics

Students who did not participate at the preliminary courses can apply for an RBG (in.tum) certificate via ssp.in.tum.de.

1.2. Non-Students

Informatics employees can request the certificate via ssp.in.tum.de and mathematics employees ssp. ma.tum.de.


2. How do I request for certificates?

Click on Login at the top left on ssp.in.tum.de or ssp.ma.tum.de.

ssplogin.png


Log in with in.tum-username@in.tum.de or ma.tum-username@ma.tum.de.

login2new.png


Select the Certificate option on the left.

sspcertificate.png


Select Standard mode here and click Continue, if you also want to download the certificate's private key. In Expert mode you have to create it yourself.

sspstandardmoderequest.png


If you want to continue, click Yes.

sspyes.png


If the certificate has been requested, you will see detailed informations regarding your certificate request on Self Service Portal.

Click here on Continue. Then you will receive an email with the certificate application.

ssprequestedcontinue.png

You will then shortly receive a second email with the certificate application. The creation of the certificate requires personal ID control. You can receive the passphrase after the ID has been checked.

these conditions .

Note : If you extend the certificate in the SSP before it expires, you can conveniently download the RBG certificate yourself without needing a new passphrase.


Note : The certificate that is downloaded via SSP is a .pem file. This file is not recognized by some programs (e.g. Outlook). To make your certificate 'recognizable', have a look at Chapter 5.



When your certificate is activated, you will receive an email and can either download it from the SSP (Self Service portal) by entering the passphrase. Then you no longer need the passphrase here. Or you can find and import the new certificate in the
 $HOME /../ home_sec / import / 
directory of the Lxhalle (here you have to enter the passphrase to import the certificate, as the certificate is encrypted) .

You can find more information about certificates on our Wiki page: http://wiki.in.tum.de/Informatik/Benutzerwiki/Zertifikate#Zertifikate.


3. How long is the certificate valid and how do I renew it?

The new certificate is valid for one year from the expiry date of the old certificate. Before the expiry date you will receive an E-Mail at your in.tum.de-Account.

The validity can be reached via this ssp.in.tum.de (for IT staff and students) or ssp.ma.tum.de (for mathematics employees) after the RBG certificate has been applied for once in the SSP and downloaded with the private key (you need to download the passphrase from rbg).

Note: After the first application and the download of the certificate in the SSP, the certificate must be installed in the browser so that the certificate can be renewed. So if you can log into the SSP with the certificate, you can also renew it in the SSP before it expires.

To do this, log into the SSP with your valid RBG certificate (must be installed in the browser) and click on Certificate on the left and then click on the plus sign at Extend your certificate. You will then see the details of how to renew the certificate. Then click Request.
certificaterequest.png


Then answer the question with Yes.

requestyes.png


Next click on Continue so that your certificate is sent to your RBG E Email address is sent.

certificatecontinue.png


You will shortly receive an email with the serial number of the process. Finally, your new RBG certificate will be emailed.

You can also download your certificate via SSP in the Certificates tab or you can find it on the Lxhalle in the home_sec/import folder.

Note : The certificate that is downloaded via SSP is a .pem file. This file is not recognized by some programs (e.g. Outlook). To make your certificate 'recognizable', look in Chapter 5.

You can see the further steps for the installation here.

3.1 What do I do if I have not renewed the certificate before it expires?

If the RBG certificate has expired, it is not possible to log into the SSP portal with the certificate. In this case, a new certificate must be obtained from ssp.in.tum.de (students, IT staff) / ssp.ma.tum.de (mathematics collaborators). You can find out how to apply for a new certificate [[https://wiki.in.tum.de/Informatik/Helpdesk/Bedingunzertifikat ][here]].

If you extend the certificate in the SSP before it expires, you can conveniently download the RBG certificate yourself without having to check your ID or need a new passphrase require.

Note : The certificate that is downloaded via SSP is a .pem file. This file is not recognized by some programs (e.g. Outlook). To make your certificate 'recognizable' have a look at Chapter 5.


4. How do I copy the certificate on my computer?

Download from the Self Service Portal

The user certificate can be downloaded from https://ssp.in.tum.de or https://ssp.ma.tum.de with the private key with the passphrase.

Copy from the Lxhalle

If you do not download the certificate from the SSP, but copy it from the Lxhalle, you need the passphrase that you received from the RBG when you first imported it into an application.

For the data transfer between the computer hall and your personal computer you can use this instruction.

For Windows Users there is an additional instruction for copying the certificate to one's computer and also a how-to for importing the certificate in the Internet Explorer and Firefox.





5. FAQ


My certificate is in .pem format, but my programm only accepts .p12 format. What should I do?

The certificate you have downloaded from the Self-Service Portal (ssp.in.tum.de/ssp.ma.tum.de) is in .pem format and some client programs do not support it. This problem is easily solved. All you have to do is find a program that accepts .pem files. Firefox is one of them, and since it is widespread, we'll assume that Firefox is being used for this guide.



Now to the real issue:

1) Make sure your old expired certificate is installed in Firefox. If it is not already installed there, you will have to export the old certificate from another application and import it in Firefox. How to export a certificate can be found in our Wiki-Anleitung .
2) Import the new certificate (.pem-file) in Firefox. How to install a certificate can be found above on this page.
3) Export the new certificate from Firefox.

Voilà! Now you have a new .p12 file, which can be imported into other programs as usual.

Note: Please be aware that when importing the new .p12 file, you must change the settings for it as usual. In particular, you must also adjust the account settings for Thunderbird. You have to select the new certificate under Account SettingsEnd-to-End EncryptionS/MIME. You can use this guide for reference.

If you encounter some problem, contact: rbg@in.tum.de



Important KB-articles that cane be of use (only accessible in the MWN network):

1- Welchen Ausweis brauche ich für die Ausstellung der Passphrase

Topic attachments
I Attachment Action Size Date Who Comment
0file.pngpng 0file.png manage 23 K 31 Aug 2020 - 11:11 AyseguelOmusNe63guq  
10emailverfassen.pngpng 10emailverfassen.png manage 80 K 31 Aug 2020 - 09:47 AyseguelOmusNe63guq  
1options.pngpng 1options.png manage 109 K 31 Aug 2020 - 09:45 AyseguelOmusNe63guq  
2trustcenter.pngpng 2trustcenter.png manage 103 K 31 Aug 2020 - 09:46 AyseguelOmusNe63guq  
3trustcentersettings.pngpng 3trustcentersettings.png manage 76 K 31 Aug 2020 - 09:46 AyseguelOmusNe63guq  
5importexport.pngpng 5importexport.png manage 47 K 31 Aug 2020 - 09:46 AyseguelOmusNe63guq  
6setsecuritylevel.pngpng 6setsecuritylevel.png manage 48 K 31 Aug 2020 - 09:47 AyseguelOmusNe63guq  
7highsecuritylevel.pngpng 7highsecuritylevel.png manage 74 K 31 Aug 2020 - 09:47 AyseguelOmusNe63guq  
8createapassword.pngpng 8createapassword.png manage 72 K 31 Aug 2020 - 09:47 AyseguelOmusNe63guq  
9importinganewprivateexchangekey.pngpng 9importinganewprivateexchangekey.png manage 48 K 31 Aug 2020 - 09:47 AyseguelOmusNe63guq  
accounts.pngpng accounts.png manage 130 K 22 Jun 2020 - 10:52 AyseguelOmusNe63guq  
appleCertificate.pngpng appleCertificate.png manage 166 K 31 Mar 2011 - 11:13 MarekOrschewskiNe26gik  
applemail_1.pngpng applemail_1.png manage 20 K 21 Mar 2018 - 10:22 TobiasZappeGa34gey  
applemail_2.pngpng applemail_2.png manage 83 K 21 Mar 2018 - 10:12 TobiasZappeGa34gey  
applemail_3.pngpng applemail_3.png manage 82 K 21 Mar 2018 - 10:16 TobiasZappeGa34gey  
applePasswd.pngpng applePasswd.png manage 19 K 31 Mar 2011 - 11:14 MarekOrschewskiNe26gik  
certificatecontinue.pngpng certificatecontinue.png manage 180 K 21 Sep 2020 - 13:58 AyseguelOmusNe63guq  
certificateImport.pngpng certificateImport.png manage 61 K 17 Mar 2011 - 09:42 MarekOrschewskiNe26gik  
certificatePassphrase.pngpng certificatePassphrase.png manage 16 K 17 Mar 2011 - 09:43 MarekOrschewskiNe26gik  
certificaterequest.pngpng certificaterequest.png manage 247 K 21 Sep 2020 - 13:59 AyseguelOmusNe63guq  
cert_preferences.pngpng cert_preferences.png manage 46 K 21 Mar 2018 - 09:54 StefanDimitriZiarasGa49taq  
firefox_0.pngpng firefox_0.png manage 22 K 21 Mar 2018 - 11:02 TobiasZappeGa34gey  
firefox_1.PNGPNG firefox_1.PNG manage 68 K 21 Mar 2018 - 10:56 TobiasZappeGa34gey  
firefox_2.PNGPNG firefox_2.PNG manage 47 K 21 Mar 2018 - 11:13 TobiasZappeGa34gey  
firefox_3.PNGPNG firefox_3.PNG manage 6 K 21 Mar 2018 - 11:17 TobiasZappeGa34gey  
igp_231aec95b139e5f834cc638ac6175542_Out7.pngpng igp_231aec95b139e5f834cc638ac6175542_Out7.png manage 8 K 31 Aug 2020 - 11:33 AyseguelOmusNe63guq  
igp_42e3ba5d5214a1cc5f268ee6bf354b42_Out6.pngpng igp_42e3ba5d5214a1cc5f268ee6bf354b42_Out6.png manage 8 K 31 Aug 2020 - 11:33 AyseguelOmusNe63guq  
igp_f0407a18a4fb12be010c704c5ae6c704_Out5.pngpng igp_f0407a18a4fb12be010c704c5ae6c704_Out5.png manage 10 K 31 Aug 2020 - 11:32 AyseguelOmusNe63guq  
importvorgangErfolgreich.pngpng importvorgangErfolgreich.png manage 20 K 21 Mar 2011 - 09:38 MarekOrschewskiNe26gik  
inhalteZertifikate.pngpng inhalteZertifikate.png manage 75 K 17 Mar 2011 - 11:33 MarekOrschewskiNe26gik  
internetOptionen.pngpng internetOptionen.png manage 182 K 17 Mar 2011 - 11:32 MarekOrschewskiNe26gik  
login2new.pngpng login2new.png manage 207 K 11 May 2020 - 09:47 AyseguelOmusNe63guq  
menuPreferences.pngpng menuPreferences.png manage 22 K 17 Mar 2011 - 09:43 MarekOrschewskiNe26gik  
Out5.pngpng Out5.png manage 10 K 31 Aug 2020 - 12:06 AyseguelOmusNe63guq  
Out6.pngpng Out6.png manage 8 K 31 Aug 2020 - 12:06 AyseguelOmusNe63guq  
Out7.pngpng Out7.png manage 8 K 31 Aug 2020 - 12:06 AyseguelOmusNe63guq  
outlook_0.PNGPNG outlook_0.PNG manage 34 K 21 Mar 2018 - 11:40 TobiasZappeGa34gey  
outlook_1.PNGPNG outlook_1.PNG manage 26 K 21 Mar 2018 - 11:44 TobiasZappeGa34gey  
outlook_2.PNGPNG outlook_2.PNG manage 41 K 21 Mar 2018 - 11:56 TobiasZappeGa34gey  
outlook_3.PNGPNG outlook_3.PNG manage 75 K 21 Mar 2018 - 12:00 TobiasZappeGa34gey  
outlook_4.PNGPNG outlook_4.PNG manage 30 K 21 Mar 2018 - 12:06 TobiasZappeGa34gey  
outlook_5.PNGPNG outlook_5.PNG manage 40 K 21 Mar 2018 - 12:11 TobiasZappeGa34gey  
outlook_6.PNGPNG outlook_6.PNG manage 11 K 21 Mar 2018 - 12:14 TobiasZappeGa34gey  
outlookpreferences.pngpng outlookpreferences.png manage 283 K 22 Jun 2020 - 10:50 AyseguelOmusNe63guq  
requestyes.pngpng requestyes.png manage 102 K 21 Sep 2020 - 13:59 AyseguelOmusNe63guq  
Screenshot 2020-06-19 at 09.13.31-certausgewaehltok.pngpng Screenshot 2020-06-19 at 09.13.31-certausgewaehltok.png manage 1 MB 22 Jun 2020 - 10:59 AyseguelOmusNe63guq  
Screenshot 2020-06-19 at 09.14.46-chooseacertificate.pngpng Screenshot 2020-06-19 at 09.14.46-chooseacertificate.png manage 154 K 22 Jun 2020 - 10:59 AyseguelOmusNe63guq  
Screenshot 2020-06-19 at 09.15.04-certauswaehlen.pngpng Screenshot 2020-06-19 at 09.15.04-certauswaehlen.png manage 166 K 22 Jun 2020 - 10:59 AyseguelOmusNe63guq  
Screenshot 2020-06-19 at 09.38.48_advanced.pngpng Screenshot 2020-06-19 at 09.38.48_advanced.png manage 179 K 22 Jun 2020 - 10:52 AyseguelOmusNe63guq  
Screenshot 2020-06-19 at 09.39.12-certnotselected.pngpng Screenshot 2020-06-19 at 09.39.12-certnotselected.png manage 1 MB 22 Jun 2020 - 10:56 AyseguelOmusNe63guq  
sspcertificate.pngpng sspcertificate.png manage 153 K 11 May 2020 - 09:52 AyseguelOmusNe63guq  
ssplogin.pngpng ssplogin.png manage 150 K 11 May 2020 - 09:46 AyseguelOmusNe63guq  
ssprequestedcontinue.pngpng ssprequestedcontinue.png manage 260 K 11 May 2020 - 09:58 AyseguelOmusNe63guq  
sspstandardmoderequest.pngpng sspstandardmoderequest.png manage 275 K 11 May 2020 - 09:53 AyseguelOmusNe63guq  
sspyes.pngpng sspyes.png manage 172 K 11 May 2020 - 09:55 AyseguelOmusNe63guq  
successAlert.pngpng successAlert.png manage 11 K 17 Mar 2011 - 09:43 MarekOrschewskiNe26gik  
trustcenteremailsecuritsimportexport.pngpng trustcenteremailsecuritsimportexport.png manage 93 K 31 Aug 2020 - 11:12 AyseguelOmusNe63guq  
viewCertificates.pngpng viewCertificates.png manage 58 K 17 Mar 2011 - 09:44 MarekOrschewskiNe26gik  
yourCertificates.pngpng yourCertificates.png manage 36 K 17 Mar 2011 - 09:44 MarekOrschewskiNe26gik  
zertifikatFormat.pngpng zertifikatFormat.png manage 10 K 21 Mar 2011 - 09:20 MarekOrschewskiNe26gik  
zertifikatImportieren.pngpng zertifikatImportieren.png manage 42 K 21 Mar 2011 - 08:59 MarekOrschewskiNe26gik  
zertifikatPassphrase.pngpng zertifikatPassphrase.png manage 62 K 21 Apr 2011 - 08:52 MarekOrschewskiNe26gik  
zertifikatSpeicher.pngpng zertifikatSpeicher.png manage 47 K 21 Mar 2011 - 09:33 MarekOrschewskiNe26gik  
Topic revision: r72 - 11 Feb 2022, AyseguelOmusNe63guq
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding Foswiki? Send feedback