Information for users about SwUPKI certificates

Svensk version finns.

TCS/SCS Certificates

Since September 2007, LiU uses mostly certificates issued through the SCS. In August 2009 TCS Certificates were introduced and started replacing the SCS Certificates. The root certificate for these certificates is included in common web browsers. You do not need to take any action to trust it.

The information on the rest of this page is still valid as long as we continue to use SwUPKI certificates.

Why?

To guarantee that the computer is connected to the right server and that the communication is secure from eavesdropping and modification, we use certificates for web servers, email servers etc. Since December 2005, we use certificates from SwUPKI.

For this to work, you must install SwUPKI's root certificate in your web browser and make sure that you trust it. When that is done, your computer trusts all SwUPKI certificates (also those issued by other universities and colleges using SwUPKI).

Need to do anything?

If you have a centrally managed computer, your system administrators may have taken care of all this for you. That applies to:

• "LiU-dator" from UNIT rebooted after November 21, 2005
• ISY/MAI/IMT: Solaris and Sunray users running Mozilla, Firebird and Thunderbird
• IDA: Sun computers for employees/students, Linux computers for employees; Windows computers (semiautomatic, installation dialog presented at login)

Others: please see the instructions below on how to install the root certificate.

Quick Instructions

If you have some computer skills, please try the quick instructions below for your web browser. If that doesn't work, you can try the detailed instructions further down.

Internet Explorer, Mozilla Firefox, Opera

Download and install SwUPKI's root certificate. Answer the questions to install the certificate. Check that the fingerprint (SHA1) is 4D:41:99:C3:B4:CA:BF:33:ED:4B:D0:5C:6C:48:60:51:58:08:93:D8.

Internet Explorer on Windows Vista

Download and install SwUPKI's root certificate. Answer the questions to install the certificate. You have to select the certificate store "Trusted Root Certificate Authorities" manually (Vista will select the wrong store if you let it choose automatically). Check that the fingerprint (SHA1) is 4D:41:99:C3:B4:CA:BF:33:ED:4B:D0:5C:6C:48:60:51:58:08:93:D8.

Safari

Save SwUPKI's root certificate on the hard disk. Find the file and double-click its icon. Answer the questions to install the certificate (add it to the X509 Anchors keyring). Check that the fingerprint (SHA1) is 4D:41:99:C3:B4:CA:BF:33:ED:4B:D0:5C:6C:48:60:51:58:08:93:D8.

Older web browsers etc

• Older web browsers (e.g. Internet Explorer on Mac OS) may have problems with the root certificate in PEM format, which is the one linked to above. Please try SwUPKI's root certificate in DER format. Answer the questions to install the certificate. Verify that the fingerprint (SHA1) is 4D:41:99:C3:B4:CA:BF:33:ED:4B:D0:5C:6C:48:60:51:58:08:93:D8. Some versions of IE on Mac OS X do not show the fingerprint, or show EF:EB:1D:6D:A1:5C:BC:AC:F7:F4:0A:CA:0A:D7:4B:32:D3:B2:BA:50:00. We have to accept that.
• Some web browsers (e.g. on Mac OS 9) need the root certificate in DER format (see above), but does not understand the file type sent by SwUPKI's web server. Please test a local copy of the SwUPKI root certificate in DER format. Verify that the fingerprint (SHA1) is 4D:41:99:C3:B4:CA:BF:33:ED:4B:D0:5C:6C:48:60:51:58:08:93:D8.

Detailed Instructions

If the quick instructions above are insufficient, see the detailed step-by-step instructions below. It may look different on your screen depending on operating system, web browser version, personal themes etc.

• Internet Explorer, Windows XP/2003, svensk version
• Internet Explorer, Windows XP/2003, English version
• Internet Explorer, Windows Vista, svensk version
• Safari, Mac OS X, svensk version
• Internet Explorer, Mac OS X, svensk version
• Mozilla Firefox, Windows XP, English

Email clients (central email system)

UNIT's helpdesk provides instructions for e-mail configuration for use with the central email system. That page will also include instructions for solving certificate related problems for email clients.

Sidansvarig: Johannes Hassmund
Senast uppdaterad: 2012-05-21