A Brief Overview Of A PKI Certificate On Internet Explorer
If you currently have a Client or Personal Authentication Certificate on a device or computer using Internet Explorer as a browser, you have the option to export it to another browser. You can also import a PKI cert from another browser, giving you the benefit to use the cert with the browser without having to make another request
It is important to realize that if you have a Personal Authentication Certificate from Comodo, your certificate will be recognized by 99.9% of browsers and devices. This includes the Comodo browsers Dragon and IceDragon as well as the popular options of Firefox, Google Chrome and Safari as well as Opera. With both Google Chrome and Safari, we provide full instructions for installation on both Windows and Mac machines.
Understanding the Process
When you apply for a Comodo PKI certificate on Internet Explorer from the computer where it will be installed all you need to do is to complete the application. With our free personal cert for use at home or for your personal email once you apply and submit the information required the certificate will automatically be installed on the browser.
At the time you apply for the Comodo PKI certificate on Internet Explorer you will be asked to provide some basic information. It is important to enter the information correctly as has to match with the certificate that is generated and installed.
You will be asked for your first name and last name. These should be your full name as it will appear on your cert. You will also need to provide your email; this will be the email you will be using for digital signatures as well as encryption.
Each certificate is only available for a given person and a given email. If you wish to secure more than one email account, you will need to apply for a separate PKI cert for each email. Unlike other types of SSL (Secure Sockets Layer) or TLS (Transport Layer Security) certificates, there is no way to use the same certificate across multiple addresses. With SSL/TLS product it is possible to have Wildcard, Multi-Domain or UC certificate that can secure more than one domain or subdomain with the same cert.
At the same time with the application for a Comodo PKI certificate on Internet Explorer you will also be asked to create a revocation password. This will be essential to remember as if you ever believe the private key or the certificate has been compromised; you will need to provide the password to us so we can revoke the certificate.
In effect, we render the public and the private keys inactive with revocation. This is the same process that would occur if the certificate expires. The keys are only programmed to function over the term of the certificate which can be one, two or three years.
At the same time as you are sending us your data, you will also have to indicate a private key option size. We recommend the high grade for optimal security. You should back up the private key that is generated by your machine, not by the Certificate Authority. The Certificate Authority will never see your private key, nor should you ever show it to anyone else.
To export an existing Comodo PKI certificate on Internet Explorer you will simply need to go into the Tools and then Internet Options box from the browser. Under the contents button look for the certificates section and click on the button that indicates Certificates.
Click on the Personal tab and look for the installed product. It will be labeled Comodo in the Issued By column. Then just click Export. This will bring up a wizard that will lead you through the rest of the export. In order to use this same certificate on another browser or email client be sure to click the box on the first page that asks if you want to export the private key with the car. If you don't, you will need to do this manually, which will require a few more steps.
Another important box to check when exporting the PKI certificate is the "include all certificates in the certification path if possible." This will ensure the chain of trust is maintained and the certificate will work when installed on the new email client or browser.
If you run into problems or if you have any questions about the best PKI certificate for your needs, see us online at https://www.instantssl.com or give us a call today at +1 888 266 6361.