| Table of Contents |
|---|
...
| Warning |
|---|
When you export/download a digital certificate, you will receive both public and private keys. The public keys are the ones that you will use to sign and encrypt emails. The private keys are the ones that will be stored on your computer. You should never share the private key(s). |
Creating a backup copy
Your personal digital certificate will be stored in Stache. You can however elect to store it elsewhere. There are several options:
Burn the contents to a CDROM
Copy the files to portable media such as a Flash drive
Copy the files to UTBox, which is approved for the storage of sensitive information.
| Warning |
|---|
Regardless of which medium you wish to store your certificate and private key, remember to secure the medium. Do not ask anyone else (such as desktop staff) to store or keep copies of your certificates. This is a security risk and not approved by ISO. WARNING: If someone else has access to your private keys, they can impersonate you or read your encrypted emails. |
Instructions for macOS X 12.x (Monterey)
In the Finder, open Utilities
Open Keychain Access.
You will notice above the list of items, there are tabs for "All Items", "Passwords", .. "Keys" and "Certificates".Click the Keys Tab. Locate your private key which will have the key icon and the name will have "@austin.utexas.edu".
Right-click on the entry, and choose
Status subtle true title Export "_____@austin.utexas.edu" Choose "Personal Information Exchange (.p12) as the file format. Name the file something the represents "private key".
Click "Save".
You will be prompted to enter a password and confirm it.
Click OK.
Click the Certificates tab, and locating your certificate with your name as the title.
Right-click on the entry, and choose
Status subtle true title Export "_____@austin.utexas.edu" Choose "Certificate (.cer)" as the file format. Name the file something the represents "certificate".
Click "Save".
You will now have two files (wherever you saved them) called "____.p12" and "____.cer".
| Note |
|---|
ImportantBe sure that you create a password that you will be able to remember at a later date or that you can store it in a separate location that is also secure. The password will be required to move the files to another computer or device or if you ever have to use the files to restore your certificates. |
Instructions for macOS X 10.10 (aka Yosmite)
In the Finder, open Utilities
...
Open Keychain Access.
...
Select your signing and encryption certificates from the list of displayed keychain items.
From the File menu, select Export.
...
Enter the name of the file you are exporting and select the P12 format.
Choose the location and filename destination where you want to export your certificate and click Next.
When prompted, create a password for the certificate files.
| Note |
|---|
ImportantBe sure that you create a password that you will be able to remember at a later date or that you can store it in a separate location that is also secure. The password will be required to move the files to another computer or device or if you ever have to use the files to restore your certificates. |
If you are creating a backup copy
There are several options for storing your backup copy of your certificates. You can:
Use portable media, such as a flash drive. Save the files to the drive and then store the flash drive in a secure location, such as a locked file cabinet or a safe.
Use a CD. Write the files to the CD and then store the CD in a secure location, such as a locked file cabinet or a safe.
Remember that you MUST have the password you created in step 7, above, in order to use the backups.
Please do not ask anyone else, such as desktop support staff, to store the backup copies of your certificates for you. It is a security risk to allow someone else to have access to the private keys that are included in the backup files.
If you are moving the files to another device or computer
There are several options for moving your certificate files from one machine to another. You can:
Use portable media, such as a flash drive. Save the files to the drive in the first computer and then move the flash drive to the other computer.
Use a CD. Write the files to the CD and then move the CD to the other computer.