TumzertifikatInstallieren
- 1. TUM Certificate
1. TUM Certificate
1. Importing the certificate
1.1. Thunderbird
1.1.1. Importing the certificate
To import the certificate to Thunderbird you need to open the 'Preferences' in Thunderbird.
Here you choose 'Erweitert' and select 'Manage Certificates'.
Then you select 'Import'.
Here you navigate to the certificate to import and select it.
Now enter your chosen password.
If you entered the correct password you see the following window.
Now your certificate gets listed in 'Your certificates'.
1.1.2. Add a new identity
To sign and encode from the @tum.de mail address you need to add a new identity. Therefore you open the 'Preferences' in Thunderbird.
Attention: @ma.tum.de don't need to do this.
The following screenshot shows the settings for the @in.tum.de account you are adding the identity for.
Here you click on 'Add'.
1.1.3. Edit the identity
You now need to select the certificate for the new identity. For this you select the new identity and click on 'Edit'.
Then you select for Digital Signing and Encryption your certificate.
Finally you click on OK.
1.1.4. Signing and encryption of Emails
The following screenshot shows a encrypted E-Mail. If there is a key visible in the bottom of the windows the email will be sent encrypted. The letter symbol means it will be sent signed.
Important: You need to always sign your emails if possible. Only if a email is signed you can ensure that the email is from the person saying they sent the mail and still contains the intended data. Sensitive data should be encrypted so third persosn can't read them.
By clicking View Security Infoyou can inspect the informations about the sender's certificate.
1.2. Apple Mail Programm
1.2.1. Import certificate
The TUM certificate was saved without file extension. You should first add the extension .p12 so it can be handled correctly.
Now you open the certificate.(Double click)
In the pop up window you enter the password you entered when saving it in firefox.
Then the certificate is saved in Keychain Access. You can open this application via Applications -> Utilities.
Once the certificate is saved into the Keycain Access it's able to be used by Apple Mail.
1.2.2. Add new identity
Now you should add an alias address to Apple Mail. Therefore open the Preferences.
Open the context menu and select Edit Email Addresses.
In the new window click '+' and enter email address and name. Finally click onto 'OK'.
The new email address for the certificate was added.
1.2.3. Signing and encrypting emails.
If you want to encrypt an email with the TUM certificate you need the just created email address in the context menu of From.
1.3. Apple - Outlook 2019
Here is shown how you can set up the email account for the TUM email address.
First click Outlook in the tab, then Preferences.
Select Accounts.
Then select your RBG (in.tum/ma.tum) account in the open window on the left and click Advanced.
Click on the Security tab and select the RBG certificate for signing and encrypting the emails.
Confirm your selection with OK.
1.4. Windows- Outlook 2019 (for the TUM email address, without a new identity)
Here is shown how you can set up the email account for the TUM email address.
1.4.1.Import certificate
Open Outlook and select File
And then select Options
Select the Trust Center and click on the button Trust Center Settings.
In the next Trust Center window, select Email Security on the left.
In the right section of the Digital IDs (Certificates) area, please select Import/Export. In the window that opens, click on Browse.
Please select the correct certificate and confirm with OK. Now you return to the view Import/Export Digital IDs, please enter the password you have assigned during the export process from Firefox. Then give the certificate a name and confirm with OK.
1.4.2.Signing and encrypting e-mails
Your certificate has been imported into Outlook and you can select it under Encrypted e-mail messages by clicking on the Set settings button for the e-mail address.
Now you should see under Signature Certificate and Encryption Certificate the certificate that you have just installed. If this is not the case, you still have to select the certificate by clicking the Select button.
Here you can see the issuer of the certificate and its expiry date.