(DC) Client Certificate
Do not delete old or expired email certificates from your computer or email client. They may still be required to open encrypted messages you previously received or sent. An expired certificate can continue to unlock/decrypt older encrypted email, even though a new certificate is needed for future signing and encryption. If an old certificate is deleted and no backup exists, those encrypted messages may become permanently unreadable.
About / What is a Client Certificate
A Client Certificate (also called a Digital Certificate or Digital ID) is a digital credential that proves your identity online. It is commonly used to digitally sign email, encrypt email containing sensitive information. When you digitally sign an email, recipients can verify that the message genuinely came from you and has not been altered in transit. When you encrypt an email, only the intended recipient can read its contents. Some secure applications and services also require a Client Certificate as part of their authentication process.
Who needs a Client Certificate?
Most university employees do not need a Client Certificate. You may need one if you:
Send or receive Category I or other sensitive information by email and need to encrypt those messages. See the
for examples of what constitutes Category-I data.MultiExcerpt IncludeMust digitally sign email to verify your identity.
Access an application or service that specifically requires certificate-based authentication.
If you are unsure whether you need a Client Certificate, consult your department’s IT support staff before requesting one. Consult with your desktop support staff or the
Client Certificate Caveats
Certificates are issued to individuals only. Shared, departmental, or role-based certificates (for example, Help Desk, Department Chair, or Finance Office) are not supported.
Certificates are intended for individual users. They are not intended for servers or services. For server certificates, see the Server Certificates documentation.
Protect your certificate. Never share your private key or certificate files with another person.
Obtaining a Client Certificate
Client (S/MIME) Certificate Availability and Purchasing
Effective October 1, 2026, Client (S/MIME) Certificates are available for purchase through CERTInext.
Certificates are sold in bundles of 10 certificates for $200 per bundle, equivalent to $20 per certificate. Client certificates have a term length of 1-year (365 days). These certificates do not follow the SSL certificate expiration timeline.
How to Purchase
University departments and units interested in purchasing Client (S/MIME) Certificates should contact the Information Security Office (ISO) at security@utexas.edu.
To initiate a purchase, the requesting department or unit must provide an Interdepartmental Transfer (IDT) account to cover the cost. Once the account information is provided, ISO will coordinate the purchase through CERTInext.
Questions or Assistance
For questions regarding Client (S/MIME) Certificates, pricing, or the purchasing process, please contact the Information Security Office (ISO) at security@utexas.edu.
Installing the Certificate
You can find instructions for importing/installing the certificate on your computer or device in the (DC) How to … section.
| | | | |
|---|