Macedonian Academic Research Grid Initiative

Importing certificate in Internet Explorer

How to Import Your Certificate to a Browser

Your certificate and private key must be located in the .globus directory in your home. In the standard LCG setup your private key is found at: ~/.globus/userkey.pem and your certificate at: ~/.globus/usercert.pem.

In order to import your private key and certificate in your browser you must create a pkcs12 bundle. This can be achieved by issuing the command:

openssl pkcs12 -export -in ~/.globus/usercert.pem -inkey \
~/.globus/userkey.pem -name "My Certificate" \
-out mycertificate.p12

After issuing the above command, you will be asked to enter the pem pass phrase. This is the pass phrase you entered during the initial process of creating the certificate request. Next you will have to enter an export password for the pkcs12 bundle and you will have to use it during the import procedure.

Transfer the pkcs12 bundle to your computer.

If you use Internet Explorer follow these instructions:

    Step 1 (Importing SEE-Grid CA Certificate to the browser)

    1. Open http://www.grid.auth.gr/pki/seegrid-ca/cacert/ in your browser

    2. Click on the link after (Import the SEE-GRID CA root certificate in your browser).

    3. A Window will pop up. Click on the button open.

    4. Select the option Install Certificate. Click on Next two times and the Finish.

    5. Answer YES to the question "Do you want to ADD the following certificate to the Root Store?".

    6. You have successfully imported the SEE-Grid CA Certificate into Internet Explorer.

    Step 2 (Import your pkcs12 bundle to the browser)

    1. Open an Internet Explorer Window

    2. Go to File->Open; Browse to the pkcs12 bundle you have transfered to the computer and open the file.

    3. A new window will popup. Press Next to the following two screens.

    4. In the 3rd screen you will be asked to enter your password. This is the export password you entered previously.

    5. Enable "Enable strong private key protection. You will be prompted every time the private key is used by an application, if you enable this option."

    6. DO NOT enable "Mark this key as exportable. This will allow you to backup or transport your keys at a later time."

    7. Select Next in the following 2 screens and the Finish.

    8. Select OK to the following window.

    9. Congratulations you have imported your certificate and private key to the browser.