DigiCert Windows Installation
Use Internet Explorer to generate your DigiCert certificates. If clicking a link in the email opens a different browser (e.g. FireFox), copy the link from your email, open Internet Explorer, and paste the link into the IE address bar.
Using Internet Explorer, the Digital Signature Plus (authentication) certificate and private key will be generated directly into your Windows certificate store when you click the "Generate Certificate" link. No further processing is needed. As noted on the certificate generation page, you may see some security warnings that you will need to accept before you can receive your certificate.
If you encounter any problems generating your certificates with Internet Explorer, you can use Firefox, instead. If you do, you will need to complete the two extra steps noted below:
IMPORTANT: If you process the link with Firefox it will place your key and certificate into its own certificate store. You will need to export the credentials to a file then import the file into the Windows certificate store. The steps are described under the Certificate Import/Export link.
Generating and installing the Email Security Plus (encryption) certificate requires a few more steps. The web page for the certificate process displays a form with a checkbox labeled:
- Also send the Certificate and Key (.pfx) to me by email
Check this box and enter a Certificate Password to protect the file. Remember this password. You will need it to complete the installation. Click the Generate Certificate button.
You will receive another email from DigiCert with an attached file named EncryptionCert.zip and install it as described below:
Follow these steps when you receive email from DigiCert with an attached file named EncryptionCert.zip.
1. Open the attachment. In it you will see a file named your_name__encryption_.pfx. Save this file in a secure location in case you ever need to reinstall. Remember the password. Open the pfx file to run the Certificate Import Wizard. Click Next to continue.
2. In the File to Import window just click Next. (The file is already selected automatically.)
3. On the next screen, checkmark the top box, enter the encryption password you used during certificate generation in the box and click Next. Even if you are the only person who uses your computer, you should always install your private key using strong private key protection. This option requires a password to open encrypted email so that if someone gets access to your computer but does not know the password they cannot read your encrypted email.
4. Select a Certificate Store. Accept the default setting by clicking Next.
5. Click Finish
6. Click Set Security Level
7. Select High and click Next
8. Enter a password (which you will need to open encrypted email), confirm, and click Finish.
9. On the final screen click OK.
You are now ready for the final setup step, configuring your email program to use the digital certificates.
Choose one of the following options to configure your email program to use the certificates:
- Windows Outlook 2010/2013
- Windows Outlook 2007
- Macintosh Outlook 2011
- Macintosh Entourage 2008
- OWA (Outlook Web Access)