..
Suche
Hinweise zum Einsatz der Google Suche
Personensuchezur unisono Personensuche
Veranstaltungssuchezur unisono Veranstaltungssuche
Katalog plus

PKI - Digitale Signatur, Verschlüsselung und Zertifikate

Background

In the electronic world, certificates are used to uniquely identify persons or servers. In cryptography and cryptology, PKI (public key infrastructure) refers to a system that makes it possible to issue, distribute and check digital certificates. The PKI of the University of Siegen distinguishes between a user and a server certificate. The user certificate is used for the unique authentication of a person, the server certificate for the identification of a server. All Uni-Siegen certificates are issued (signed) by a trusted Certificate Authority (CA). On-site processing (e.g. verification of identities by means of an identity card) is carried out by a local Registration Authority (RA). With the help of user certificates, it is possible to sign files or messages, to uniquely identify the authorship of a signed document, to check for changes during transmission or to encrypt data. With the server certificate, it can be ensured that I am connected to the correct server (e.g. ssl connections).

The University of Siegen does not operate its own certification body but uses the service of the DFN Association. Since the DFN Association has restructured the service, different application channels for user certificates and server certificates are currently necessary.

Applying for a user certificate of the University of Siegen

Most employees of the University of Siegen are clearly identified via the recruitment process and can apply for a user certificate without further identification. If you receive an error message when logging in to Sectigo, you do not belong to this group of users and must identify yourself. Please contact support@zimt.uni-siegen.de for the necessary steps.

Students must always identify themselves once.

Please use this path exclusively to apply for user certificates. You can get certificates for the e-mail domains uni-siegen.de, student.uni-siegen.de and zv.uni-siegen.de only. For group certificates please send an mail to ZIMT Support with group e-mail address and group name.

You can apply for a user certificate using the following link:

https://cert-manager.com/customer/DFN/idp/clientgeant

Howto - Apply for a user Zertificate 

Certificates of the intermediate certification authorities are available at https://doku.tid.dfn.de/_media/de:dfnpki:ca:tcs-server-certificate-ca-bundle.tar

The root certificate of the service provider Sectigo is pre-installed in all current browsers but can also be obtained.

https://doku.tid.dfn.de/_media/de:dfnpki:ca:tcs-root-bundle.tar 


Applying for a server certificate of the University of Siegen

For the application you need the CSR (Certifikate Signing Request). You must authenticate to the service.

You can apply for a server certificate using the following link:

Howto  - Antrag Serverzertifikat über DFN-AAI

Certificates of the intermediate certification authorities are available at https://doku.tid.dfn.de/_media/de:dfnpki:ca:tcs-server-certificate-ca-bundle.tar

The root certificate of the service provider Sectigo is pre-installed in all current browsers but can also be obtained.

https://doku.tid.dfn.de/_media/de:dfnpki:ca:tcs-root-bundle.tar 

Certificates are stored in different certificate stores in a wide variety of systems, depending on the operating system and application. When requesting a certificate, the associated private keys are stored on the system. To use it, the private key and certificate must be in the same certificate store. If the certificate is available after successful application, it must therefore be imported back into the certificate store of the system with which the application was made. Below you will find some

 Instructions for importing/exporting the certificate

 
Suche
Hinweise zum Einsatz der Google Suche