• 1. TUM Certificate
  • 1. Importing the certificate
    • 1.1. Thunderbird
      • 1.1.1. Importing the certificate
      • 1.1.2. Add a new identity
      • 1.1.3. Edit the identity
      • 1.1.4. Signing and encryption of Emails
    • 1.2. Apple Mail Programm
      • 1.2.1. Import certificate
      • 1.2.2. Add new identity
      • 1.2.3. Signing and encrypting emails.
    • 1.3. Apple - Outlook 2019
    • 1.4. Windows- Outlook 2019 (for the TUM email address, without a new identity)
      • 1.4.1.Import certificate
      • 1.4.2.Signing and encrypting e-mails

1. TUM Certificate

1. Importing the certificate

1.1. Thunderbird

1.1.1. Importing the certificate

To import the certificate to Thunderbird you need to open the 'Preferences' in Thunderbird.

Here you choose 'Erweitert' and select 'Manage Certificates'.

Then you select 'Import'.

Here you navigate to the certificate to import and select it.

Now enter your chosen password.

If you entered the correct password you see the following window.

 Now your certificate gets listed in 'Your certificates'.

1.1.2. Add a new identity

To sign and encode from the @tum.de mail address you need to add a new identity. Therefore you open the 'Preferences' in Thunderbird.
Attention: @ma.tum.de don't need to do this.

The following screenshot shows the settings for the @in.tum.de account you are adding the identity for.

Here you click on 'Add'.

1.1.3. Edit the identity

You now need to select the certificate for the new identity. For this you select the new identity and click on 'Edit'.

 
Then you select for Digital Signing and Encryption your certificate.

Finally you click on OK.

1.1.4. Signing and encryption of Emails

The following screenshot shows a encrypted E-Mail. If there is a key visible in the bottom of the windows the email will be sent encrypted. The letter symbol means it will be sent signed.

Important: You need to always sign your emails if possible. Only if a email is signed you can ensure that the email is from the person saying they sent the mail and still contains the intended data. Sensitive data should be encrypted so third persosn can't read them.

 
By clicking View Security Infoyou can inspect the informations about the sender's certificate.

1.2. Apple Mail Programm

1.2.1. Import certificate

The TUM certificate was saved without file extension. You should first add the extension .p12 so it can be handled correctly.

Now you open the certificate.(Double click)

In the pop up window you enter the password you entered when saving it in firefox.

Then the certificate is saved in Keychain Access. You can open this application via Applications -> Utilities.

Once the certificate is saved into the Keycain Access it's able to be used by Apple Mail.

1.2.2. Add new identity

Now you should add an alias address to Apple Mail. Therefore open the Preferences.

Open the context menu and select Edit Email Addresses.

In the new window click '+' and enter email address and name. Finally click onto 'OK'.

The new email address for the certificate was added.

1.2.3. Signing and encrypting emails.

If you want to encrypt an email with the TUM certificate you need the just created email address in the context menu of From.

1.3. Apple - Outlook 2019

Here is shown how you can set up the email account for the TUM email address.

First click Outlook in the tab, then Preferences.

Select Accounts.

Then select your RBG (in.tum/ma.tum) account in the open window on the left and click Advanced.

Click on the Security tab and select the RBG certificate for signing and encrypting the emails.

Confirm your selection with OK.

1.4. Windows- Outlook 2019 (for the TUM email address, without a new identity)

Here is shown how you can set up the email account for the TUM email address.

1.4.1.Import certificate

Open Outlook and select File

And then select  Options 

Select the Trust Center and click on the button Trust Center Settings.

In the next Trust Center window, select Email Security on the left.

In the right section of the Digital IDs (Certificates) area, please select Import/Export. In the window that opens, click on Browse.
Please select the correct certificate and confirm with OK. Now you return to the view Import/Export Digital IDs, please enter the password you have assigned during the export process from Firefox. Then give the certificate a name and confirm with OK.

1.4.2.Signing and encrypting e-mails

Your certificate has been imported into Outlook and you can select it under Encrypted e-mail messages by clicking on the Set settings button for the e-mail address.

Now you should see under Signature Certificate and Encryption Certificate the certificate that you have just installed. If this is not the case, you still have to select the certificate by clicking the Select button.

Here you can see the issuer of the certificate and its expiry date.