Client SSL Certificates

Client SSL Certificates (SSL = secure socket layer) are useful for digitally signing Adobe Acrobat PDF documents and encrypting mail messages to known colleagues.

  1. To request a client SSL certificate, send email to ssl-sysadmin@ssl.berkeley.edu with the title “Request Signature certificate”. Also send email to this address if you have any questions.
  2. You must have an @ssl.berkeley.edu email address to proceed. We don’t handle Signature certificates for @berkeley.edu or other email addresses.
  3. Signature certificates are only available to active (i.e. paid) SSL employees. Volunteers and affiliates are not eligible.
  4. These certificates can be used to sign and/or encrypt emails or other documents. However, there is no “key escrow” (i.e. password recovery) available for them. If you lose your password, there is no way for us to recover it for you, hence there will be no way to decrypt the document anymore.

Once the certificate is generated you will get an email.  If it asks for a pin or password, make absolutely sure you never forget it. Once you forget it, there is no way of unlocking signed documents.

Dear User,

You now need to complete the following steps:

* Click the following link to validate your email
https://cert-manager.com/customer/InCommon/smime?action=invite&requestCode=PpTai2x&email=satow%40ssl%2eberkeley%2eedu

(if the link doesn’t work please copy request code Ig8Q-MAs2E8P6Ro9gHPpTai2x and paste it into proper field in the validation form).

* Your request code: Ig8Q-MAs2E8P6Ro9gHPpTai2x

* Type in a PIN to protect your email certificate

* Click ‘Download’ to collect your certificate. You should save this file to a safe place on your hard drive.

* Import your new certificate into your email client and/or internet browser.
(Please contact your administrator for help with this/Please click the following link for instructions).

 

How to sign Adobe Acrobat PDF Documents using your certificate

How to encrypt email using your E-Mail client