wiki.in.tum.de
Technische Universität München
You are here: Foswiki>Informatik/Helpdesk Web>Tumzertifikat (04 Jul 2019, MatthiasPuchsteinGa67hac)Edit Attach

1. TUM/DFN Certificate

1. Select institute

You can get an certificate for any TUM email adresses (@mytum.de / @tum.de) issued.

To receive a SSL certificate you need to create an user certificate application on the DFN webpage. Therefore you select your facility:

2. Creation of certification on the DFN webpage

You need to fill the application for the certificate as it is shown in the screenshot. Then you click onto 'Weiter'.

Attention: If you apply for a group certificate you the need to feel the _GRP field with the name of the shared folder or function address. (eg GRP: RBG-Helpdesk)


dfnseite-zertbeantragen.jpeg

On the next page you need to confirm your entered data. If everything is correct click 'Bestätigen'. If anything is incorrect, click 'Ändern' to return to the previous page.


dfnseite-zertbestätigen.jpeg

Next click 'Zertifikatsantrag anzeigen' to download the application.
TUM CA - zertifikatanzeigenneuu copy.jpg

3. Print and sign certificate application

After downloading the application you have to print und sign it. The application looks like:
Zertifikatantrag.pdf 031neu.jpg


Zertifikatantrag.pdf 032.jpg

4. Activate the certificate

To activate the certificate come in person to the responsible location for you(with your ID and the signed application):

  • TUM Innenstadt (außer Fakultäten EI, BGU und EDU): Wolfgang Nowarre, Richard-Wagner-Str. 18 , Karmela Vellguth Karlstrasse 45, 5. Stock, Raum 5011.
  • EI (Elektro-/Informationstechnik): Herr Ranke, Arcisstr. 21, Raum 2913.
  • BGU (Bau Geo Umwelt): Robert Dietl (ca.bgu@tum.de), Arcisstr. 21, Geb. 0501, 3. Stock, Raum 0501.03.183.
  • EDU (School of Education): Peter Smej ; Jürgen Meister.
  • WZW (Wissenschaftszentrum Weihenstephan): ITW-Helpdesk. Weitere Hinweise .
  • PH (Physik): Herr Homolka, James-Franck-Str. 1, Raum 5101.EG.246.
  • MW (Maschinenwesen): Registrierungsstelle MW. Weitere Hinweise.
  • Garching (Mathematik, Informatik und Chemie): Fakultät für Mathematik und Informatik der TU München Rechnerbetriebsgruppe RBG Boltzmannstraße 3 85748 Garching, Ansprechpartner: RBG Systemgruppe (FMI Gebäude, Erdgeschoss, Finger 5).

5. Import the certificate

After activating the certificate you receive an email. This email contains a link to the DFN page.

Note: When you apply for the certificate the private key gets saved to the browser you use. So you need to open the link in the email in the same browser you applied for the certificate for.


Inbox - Mozilla Thunderbird_dfnmailzertfikatlinkneueste.jpg

Firstoff you open the link below point 1 and click on Wurzelzertifikate, DFN-PCA-Zertifikat und DFN-CA Global G2-Zertifikat so they can be installed to you browser.
TUM CA - zertifikate-firefox.jpg

Next you open the link below point 2 in the email. On open DFN page you click on 'Zertifikat importieren'.
dfnseite-Mozilla Firefox nzertifikatimportieren.jpg

If you entered a PIN when you applied for the certificate you have to enter it when you are importing.
dfnseite- Fakultät für Informatik - PIN eingeben.jpg


Alert certificate installed.jpg


After importing you can save the DFN certificate. Therefore your open the Firefox 'Preferences. Preferences - Mozilla Firefox neu.jpg


In the left tab you select 'Privacy & Security' and then 'View Certificates'.
Preferences - Mozilla Firefox view-certificates.jpg

You can find your installed certificates under 'Your certificates'. Here you select the certificate and click on 'Backup'.

Attention: If you have multiple certificates installed they will all be saved by clicking 'Backup All' and then can be installed into other browsers and mail clients.
firefox Preferences - backup.jpg


In the next step you select where it should be saved.
File Name to Backup 1.jpg

HINWEIS: It's advised to save the certificate as .p12.

Next you choose a password for the certificate.
Choose a Certificate Backup Password.jpg

Attention: You need to enter this password everytime you want to import it somewhere.
Alert successfully restored.jpg

6. Importing the certificate

6.1. Thunderbird

6.1.1. Importing the certificate

To import the certificate to Thunderbird you need to open the 'Preferences' in Thunderbird.


Inbox - Mozilla Thunderbird preferences NEU.jpg

Here you choose 'Erweitert' and select 'Manage Certificates'. Thunderbird Preferences manage-certicates.jpg

Then you select 'Import'.

Certificate Manager thunderbird import1.jpg

Here you navigate to the certificate to import and select it.
Certificate File to Import 1.jpg



Now enter your chosen password.
Password Required thunderbird dfnpin.jpg



If you entered the correct password you see the following window.
Alert certificate installed.jpg


Now your certificate gets listed in 'Your certificates'.
Certificate Manager thunderbird import2.jpg

6.1.2. Add a new identity

To sign and encode from the @tum.de mail address you need to add a new identity. Therefore you open the 'Preferences' in Thunderbird. Attention: @ma.tum.de don't need to do this.
Inbox - Mozilla Thunderbird account settings.jpg

The following screenshot shows the settings for the @in.tum.de account you are adding the identity for.
Account Settings manage identities.jpg

Here you click on 'Add'.
Identities add.jpg


New Identity 2.jpeg

6.1.3. Edit the identity

You now need to select the certificate for the new identity. For this you select the new identity and click on 'Edit'.
Identities edit.jpg


Then you select for Digital Signing and Encryption your certificate.
Edit selectzertifikat1.jpg


Finally you click on OK.
Edit maxmustermannidentitycertauswählen.jpg

6.1.4. Signing and encryption of Emails

The following screenshot shows a encrypted E-Mail. If there is a key visible in the bottom of the windows the email will be sent encrypted. The letter symbol means it will be sent signed.

Important: You need to always sign your emails if possible. Only if a email is signed you can ensure that the email is from the person saying they sent the mail and still contains the intended data. Sensitive data should be encrypted so third persosn can't read them.
thunderbirdverschlmail.jpg

Write: Test 2.jpg

By clicking View Security Info you can inspect the informations about the sender's certificate.
Write: Test security info.jpg


Message Security thunderbird jpg.jpg

6.2. Apple Mail Programm

6.2.1. Import certificate

The TUM certificate was saved without file extension. You should first add the extension .p12 so it can be handled correctly.
Now you open the certificate.(Double click)

11.zertifikatinkeychainimportierenneu.png

In the pop up window you enter the password you entered when saving it in firefox.

222.backuppassworteingebenneu2.png

Then the certificate is saved in Keychain Access. You can open this application via Applications → Utilities.

33.keychaintumzertifikatneu.png

Once the certificate is saved into the Keycain Access it's able to be used by Apple Mail.

6.2.2. Add new identity

Now you should add an alias address to Apple Mail. Therefore open the Preferences.

1.macmaileinstellungen.png


Open the context menu and select Edit Email Addresses.

2.macmailaccountinformation.png


In the new window click '+' and enter email address and name. Finally click onto 'OK'.

3.macmaileditemailadress.png


The new email address for the certificate was added.

44.applemailnewidentity2.png

6.2.3. Signing and encrypting emails.

If you want to encrypt an email with the TUM certificate you need the just created email address in the context menu of From.

mactumzertverschlemail.png

mactumzertverschlemail2.png

Topic attachments
I Attachment Action Size Date Who Comment
11.zertifikatinkeychainimportierenneu.pngpng 11.zertifikatinkeychainimportierenneu.png manage 24 K 17 Oct 2018 - 14:26 AyseguelOmusNe63guq  
1.macmaileinstellungen.pngpng 1.macmaileinstellungen.png manage 27 K 17 Oct 2018 - 12:24 AyseguelOmusNe63guq macmaileinstell
1.zertifikatinkeychainimportieren.pngpng 1.zertifikatinkeychainimportieren.png manage 27 K 17 Oct 2018 - 12:22 AyseguelOmusNe63guq maczertimport
222.backuppassworteingebenneu2.pngpng 222.backuppassworteingebenneu2.png manage 48 K 17 Oct 2018 - 14:47 AyseguelOmusNe63guq  
22.backuppassworteingebenneu.pngpng 22.backuppassworteingebenneu.png manage 49 K 17 Oct 2018 - 14:27 AyseguelOmusNe63guq  
2.backuppassworteingeben.pngpng 2.backuppassworteingeben.png manage 55 K 17 Oct 2018 - 12:22 AyseguelOmusNe63guq macbackuppass
2.macmailaccountinformation.pngpng 2.macmailaccountinformation.png manage 64 K 17 Oct 2018 - 12:24 AyseguelOmusNe63guq macmailaccountinf
33.keychaintumzertifikatneu.pngpng 33.keychaintumzertifikatneu.png manage 100 K 17 Oct 2018 - 14:27 AyseguelOmusNe63guq  
3.keychaintumzertifikat.pngpng 3.keychaintumzertifikat.png manage 99 K 17 Oct 2018 - 12:23 AyseguelOmusNe63guq keychain
3.macmaileditemailadress.pngpng 3.macmaileditemailadress.png manage 46 K 17 Oct 2018 - 12:24 AyseguelOmusNe63guq macmaileditemailadr
44.applemailnewidentity2.pngpng 44.applemailnewidentity2.png manage 113 K 17 Oct 2018 - 14:25 AyseguelOmusNe63guq  
4.applemailnewidentity2.pngpng 4.applemailnewidentity2.png manage 114 K 17 Oct 2018 - 12:25 AyseguelOmusNe63guq macmailnewidentity
Account Settings_manage_identities.jpgjpg Account Settings_manage_identities.jpg manage 163 K 08 Oct 2018 - 18:31 AyseguelOmusNe63guq manageidentities
Alert_certificate_installed.jpgjpg Alert_certificate_installed.jpg manage 21 K 08 Oct 2018 - 16:40 AyseguelOmusNe63guq zertinstalledimport
Alert_successfully_restored.jpgjpg Alert_successfully_restored.jpg manage 18 K 04 Oct 2018 - 13:24 AyseguelOmusNe63guq succesfullyrestored
Archive.zipzip Archive.zip manage 185 K 04 Oct 2018 - 13:22 AyseguelOmusNe63guq 2
Certificate File to Import_1.jpgjpg Certificate File to Import_1.jpg manage 77 K 04 Oct 2018 - 13:24 AyseguelOmusNe63guq import1
Certificate Manager_thunderbird_import1.jpgjpg Certificate Manager_thunderbird_import1.jpg manage 75 K 04 Oct 2018 - 14:02 AyseguelOmusNe63guq import1
Certificate Manager_thunderbird_import2.jpgjpg Certificate Manager_thunderbird_import2.jpg manage 91 K 04 Oct 2018 - 14:02 AyseguelOmusNe63guq import2
Choose a Certificate Backup Password_046.jpgjpg Choose a Certificate Backup Password_046.jpg manage 76 K 04 Oct 2018 - 14:00 AyseguelOmusNe63guq 046
Choose a Certificate Backup Password.jpgjpg Choose a Certificate Backup Password.jpg manage 76 K 04 Oct 2018 - 14:04 AyseguelOmusNe63guq passwortchoose
dfnseite-antraganzeigen.jpgjpg dfnseite-antraganzeigen.jpg manage 183 K 08 Oct 2018 - 21:52 AyseguelOmusNe63guq antraganzeigen
dfnseitebestätigenn.jpegjpeg dfnseitebestätigenn.jpeg manage 151 K 04 Oct 2018 - 15:11 AyseguelOmusNe63guq dfnbestätigen
dfnseitecertbenatragenweiter.jpegjpeg dfnseitecertbenatragenweiter.jpeg manage 355 K 04 Oct 2018 - 15:10 AyseguelOmusNe63guq dfnseiteweiter
dfnseite- Fakultät für Informatik - PIN eingeben.jpgjpg dfnseite- Fakultät für Informatik - PIN eingeben.jpg manage 145 K 08 Oct 2018 - 17:16 AyseguelOmusNe63guq zertimportierenpineingeben
dfnseite-fireox- tumzertifikatändern-bestätigen.jpgjpg dfnseite-fireox- tumzertifikatändern-bestätigen.jpg manage 159 K 04 Oct 2018 - 14:36 AyseguelOmusNe63guq dfnseitebestätigen
dfnseite-Mozilla Firefox_nzertifikatimportieren.jpgjpg dfnseite-Mozilla Firefox_nzertifikatimportieren.jpg manage 184 K 04 Oct 2018 - 14:37 AyseguelOmusNe63guq dfnseitezertifikatimportieren
dfnseite-zertbeantragen.jpegjpeg dfnseite-zertbeantragen.jpeg manage 366 K 08 Oct 2018 - 11:46 AyseguelOmusNe63guq beantragendfnneu
dfnseite-zertbestätigen.jpegjpeg dfnseite-zertbestätigen.jpeg manage 165 K 08 Oct 2018 - 11:47 AyseguelOmusNe63guq dfnseitebeantragen2neu
dfnzertifikat1.jpgjpg dfnzertifikat1.jpg manage 337 K 27 Jun 2018 - 14:01 AyseguelOmusNe63guq dfn1
dfnzertifikat2.jpgjpg dfnzertifikat2.jpg manage 130 K 27 Jun 2018 - 14:01 AyseguelOmusNe63guq dfn2
dfnzertifikat3.jpgjpg dfnzertifikat3.jpg manage 181 K 27 Jun 2018 - 14:01 AyseguelOmusNe63guq dfn3
dfnzertifikat4a.jpgjpg dfnzertifikat4a.jpg manage 375 K 27 Jun 2018 - 15:03 AyseguelOmusNe63guq dfn4a
dfnzertifikat4cjpg.jpgjpg dfnzertifikat4cjpg.jpg manage 372 K 27 Jun 2018 - 15:27 AyseguelOmusNe63guq dfn4c
dfnzertifikat4d.jpgjpg dfnzertifikat4d.jpg manage 380 K 27 Jun 2018 - 15:37 AyseguelOmusNe63guq dfn4d
dfnzertifikat4.jpgjpg dfnzertifikat4.jpg manage 363 K 27 Jun 2018 - 14:02 AyseguelOmusNe63guq dfn4
dfnzertifikat5a.jpgjpg dfnzertifikat5a.jpg manage 136 K 27 Jun 2018 - 14:31 AyseguelOmusNe63guq dfn5a
dfnzertifikat5b.jpgjpg dfnzertifikat5b.jpg manage 135 K 27 Jun 2018 - 14:49 AyseguelOmusNe63guq dfn5b
dfnzertifikat5ce.jpgjpg dfnzertifikat5ce.jpg manage 136 K 27 Jun 2018 - 15:27 AyseguelOmusNe63guq dfn5ce
dfnzertifikat5cf.jpgjpg dfnzertifikat5cf.jpg manage 137 K 27 Jun 2018 - 15:38 AyseguelOmusNe63guq dfn5cf
dfnzertifikat5c.jpgjpg dfnzertifikat5c.jpg manage 135 K 27 Jun 2018 - 15:21 AyseguelOmusNe63guq dfn5c
dfnzertifikat5.jpgjpg dfnzertifikat5.jpg manage 151 K 27 Jun 2018 - 14:02 AyseguelOmusNe63guq dfn5
Edit maxmustermannidentitycertauswählen.jpgjpg Edit maxmustermannidentitycertauswählen.jpg manage 144 K 08 Oct 2018 - 21:22 AyseguelOmusNe63guq selectzert2neu
Edit selectzertifikat1.jpgjpg Edit selectzertifikat1.jpg manage 172 K 08 Oct 2018 - 20:19 AyseguelOmusNe63guq selectzertedit
File Name to Backup_1.jpgjpg File Name to Backup_1.jpg manage 78 K 04 Oct 2018 - 14:05 AyseguelOmusNe63guq backup1
File Name to Backup_save.jpgjpg File Name to Backup_save.jpg manage 77 K 04 Oct 2018 - 14:12 AyseguelOmusNe63guq backupsave
firefox_Preferences - backup.jpgjpg firefox_Preferences - backup.jpg manage 101 K 04 Oct 2018 - 14:12 AyseguelOmusNe63guq firefoxbackup
Identities_add.jpgjpg Identities_add.jpg manage 43 K 04 Oct 2018 - 14:23 AyseguelOmusNe63guq add
Identities_edit.jpgjpg Identities_edit.jpg manage 45 K 04 Oct 2018 - 14:24 AyseguelOmusNe63guq editidentities
Identities for kahramanin.tum.de_add_identities.jpgjpg Identities for kahramanin.tum.de_add_identities.jpg manage 43 K 04 Oct 2018 - 14:17 AyseguelOmusNe63guq addidentities
Identities for kahramanin.tum.de_edit.jpgjpg Identities for kahramanin.tum.de_edit.jpg manage 46 K 04 Oct 2018 - 14:18 AyseguelOmusNe63guq editidentities
Inbox - Mozilla Thunderbird_account_settings.jpgjpg Inbox - Mozilla Thunderbird_account_settings.jpg manage 61 K 04 Oct 2018 - 14:24 AyseguelOmusNe63guq thunderbirdaccountsettings
Inbox - Mozilla Thunderbird_dfnmailzertfikatlink.jpgjpg Inbox - Mozilla Thunderbird_dfnmailzertfikatlink.jpg manage 250 K 04 Oct 2018 - 14:25 AyseguelOmusNe63guq thundebirddfnmailzertlink
Inbox - Mozilla Thunderbird_dfnmailzertfikatlinkneueste.jpgjpg Inbox - Mozilla Thunderbird_dfnmailzertfikatlinkneueste.jpg manage 251 K 16 Oct 2018 - 14:10 AyseguelOmusNe63guq  
Inbox - Mozilla Thunderbird_dfnmailzertfikatlinkneu.jpgjpg Inbox - Mozilla Thunderbird_dfnmailzertfikatlinkneu.jpg manage 251 K 16 Oct 2018 - 14:08 AyseguelOmusNe63guq  
Inbox - Mozilla Thunderbird_preferences_NEU.jpgjpg Inbox - Mozilla Thunderbird_preferences_NEU.jpg manage 60 K 04 Oct 2018 - 14:26 AyseguelOmusNe63guq thunderbirdpreferences
mactumzertverschlemail2.pngpng mactumzertverschlemail2.png manage 28 K 17 Oct 2018 - 13:51 AyseguelOmusNe63guq macmailverschlemail2
mactumzertverschlemail.pngpng mactumzertverschlemail.png manage 35 K 17 Oct 2018 - 12:25 AyseguelOmusNe63guq macmailverschlemail
Message Security_thunderbird_jpg.jpgjpg Message Security_thunderbird_jpg.jpg manage 57 K 08 Oct 2018 - 21:15 AyseguelOmusNe63guq massagesec
New Identity_2.jpegjpeg New Identity_2.jpeg manage 119 K 08 Oct 2018 - 22:53 AyseguelOmusNe63guq identitätbearbeiten
New Identity_edit.jpgjpg New Identity_edit.jpg manage 127 K 04 Oct 2018 - 14:27 AyseguelOmusNe63guq identitysettingsedit
Password Required_dfnpin.jpgjpg Password Required_dfnpin.jpg manage 28 K 04 Oct 2018 - 14:27 AyseguelOmusNe63guq passwortrequiredpin
Password Required_thunderbird_dfnpin.jpgjpg Password Required_thunderbird_dfnpin.jpg manage 29 K 08 Oct 2018 - 17:07 AyseguelOmusNe63guq dfnpinneu
Preferences - Mozilla Firefox_neu.jpgjpg Preferences - Mozilla Firefox_neu.jpg manage 55 K 04 Oct 2018 - 14:30 AyseguelOmusNe63guq firefoxsettingsneu
Preferences - Mozilla Firefox_view-certificates.jpgjpg Preferences - Mozilla Firefox_view-certificates.jpg manage 270 K 04 Oct 2018 - 14:31 AyseguelOmusNe63guq firefoxviewcertificates
Select Certificate_062.jpgjpg Select Certificate_062.jpg manage 112 K 04 Oct 2018 - 14:31 AyseguelOmusNe63guq selectcertificate
Thunderbird Preferences_manage-certicates.jpgjpg Thunderbird Preferences_manage-certicates.jpg manage 88 K 04 Oct 2018 - 14:38 AyseguelOmusNe63guq thunderbird-managezertifiates
thunderbirdverschlmail.jpgjpg thunderbirdverschlmail.jpg manage 129 K 17 Oct 2018 - 15:01 AyseguelOmusNe63guq  
TUM CA - zertifikatanzeigenneuu copy.jpgjpg TUM CA - zertifikatanzeigenneuu copy.jpg manage 280 K 08 Oct 2018 - 22:31 AyseguelOmusNe63guq zertbeantragenneuu
TUM CA - zertifikate-firefox.jpgjpg TUM CA - zertifikate-firefox.jpg manage 223 K 16 Oct 2018 - 14:08 AyseguelOmusNe63guq  
Write: Test_040.jpgjpg Write: Test_040.jpg manage 126 K 08 Oct 2018 - 21:17 AyseguelOmusNe63guq writetest
Write: Test_2.jpgjpg Write: Test_2.jpg manage 136 K 08 Oct 2018 - 21:12 AyseguelOmusNe63guq writetest2
Write: Test_security_info.jpgjpg Write: Test_security_info.jpg manage 133 K 08 Oct 2018 - 21:13 AyseguelOmusNe63guq writesecinfo
Zertifikatantrag.pdf_031neu.jpgjpg Zertifikatantrag.pdf_031neu.jpg manage 579 K 04 Oct 2018 - 14:38 AyseguelOmusNe63guq zertifikatsantragneu
Zertifikatantrag.pdf_032.jpgjpg Zertifikatantrag.pdf_032.jpg manage 257 K 04 Oct 2018 - 14:38 AyseguelOmusNe63guq zertifikatsnatragneu2
Topic revision: r33 - 04 Jul 2019, MatthiasPuchsteinGa67hac
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding Foswiki? Send feedback