(DC) [OS X] Export / Back Up Client Certificates
Creating a backup copy
When you export/download a client certificate, you will receive both public and private keys. The public keys are the ones that you will use to sign and encrypt emails. The private keys are the ones that will be stored on your computer. You should never share the private key(s).
WARNING: If someone else has access to your private keys, they can impersonate you or read your encrypted emails.
When you have obtained your client certificate, you need to visit the website provided or open the email with the certificate attached. Download the certificate to a folder where you can access it. You may have to enter a password - which should have been provided to you. Please locate that password before your proceed.
Proceed to store those downloaded files in any of the following methods:
Import it into 1Password.
Burn the contents to a CDROM.
Copy the files to portable media such as a Flash drive
Copy the files to UTBox, which is approved for the storage of sensitive information.
Regardless of which medium you wish to store your certificate and private key, remember to secure the medium.
Do not ask anyone else (such as desktop staff) to store or keep copies of your certificates. This is a security risk and not approved by ISO.
WARNING: If someone else has access to your private keys, they can impersonate you or read your encrypted emails.
Important
Be sure that you create a password that you will be able to remember at a later date or that you can store it in a separate location that is also secure. The password will be required to move the files to another computer or device or if you ever have to use the files to restore your certificates.