Create user certificate

Instructions for: Gèant PKI Certificates

General information

In this guide, you will learn how to apply for and collect user certificates at RPTU to securely sign your emails and documents. These certificates are used to guarantee the authenticity and integrity of your messages and files.

Prerequisites
  • Existing employment contract at RPTU
  • Valid RPTU account
  • An already completed identity check

Short and sweet

Brief information

  • Login: RPTU account name without @rptu.de (e.g.: mus77ter)
  • Password: RPTU password
  • Identity check: Successful upon hiring / can be requested from the RZ Service Center

 

Note:
It is not possible to apply for a user certificate with multiple e-mail aliases in this way.


Step by step

Illustrated instructions

Sectigo Certificate Manager user certificates
Step 1: Logging on to the Certificate Manager
Step 2: Login via Shibboleth
  • Log in via Shibboleth with your RPTU account (without @rptu.de)
  • Accept the transfer of the required information

NOTE:
If you receive the following error message:

Digital Certificate Enrollment:
You are not allowed to self-enroll. Please contact your security administrator.

we may not have sufficient identity verification from you. In this case, please contact rz-zertifikate(at)rptu.de or visit one of the RZ Service Centers to carry out an identity check.

Step 3: Customizing the certificate options

Please fill out the application as shown in the picture:

Certificate Profile:
GÉANT Personal email signing and encryption

Term:
730 days

Enrollment Method:
Key Generation Key Type: RSA-4096 (or if available: RSA-8192)

Choose a good password to protect your private key (do not use your RPTU password!) and write it down in a safe place.

Choose key protection algorithm:
Compatible TripleDES-SHA1

If you accept the EULA conditions, the submit button will be enabled and you can complete the application.

Step 4: Generation of the certificate

After you have completed the application and read and agreed to the EULA, you will be shown a waiting window.

Do not close the window, as the certificate will be generated during this time! This may take several minutes.

Step 5: Download the certificate

When the certificate is generated, it will download automatically and you will receive a success message.


or also

Relevant links

All instructions for setting up the certificate


Lost?

Support options