Technical information > Setting up your Web browsers > Adding a client certificate

Adding a client certificate

To access services from public networks via Client Certificate Authentication or Remote Service, you must add a client certificate to your Web browser.

For the client certificate and its password, contact your system administrator.

Tip
  • What is a client certificcate?
    Client certificate is a certificate to recognize the user (SSL certificate) .
    Because the client certificate is installed in a web browser, users can be recognized more easily than entering the user name and the password at each access.

Adding a client certificate

This section describes how to add the client certificate to your Web browser.
The procedure for adding a client certificate varies depending on the Web browser that you are using.
For supported Web browsers for your client certificate, see the system requirements for each product.

For Internet Explorer (Windows)

This section assumes the following:

  • Internet Explorer 8 is used as a Web browser.
  1. Get the client certificate and its password from your system administrator.
  1. Double-click the client certificate (********.pfx). Then the security warning screen may appear, and clickYesto continue adding the client certificate.
  1. ClickNext.
    "Certificate Import Wizard" screen
  1. Confirm whether the client certificate that you want to add is displayed in the "File name" field, and clickNext.To change the client certificate, clickBrowseto select a client certificate.
    "File to import" screen
  1. Enter the client certificate password in the "Password" field, and clickNext.For the client certificate password, contact your system administrator.
    • For Internet Explorer 8
      "Password" screen
    • For Internet Explorer 9/10
      「パスワード」画面
  1. Select "Automatically select the certificate store based on the type of certificate", and clickNext.
    "Certificate Store" screen
  1. ClickFinish.
    "Completing the Certificate Import Wizard" screen
  1. ClickOK. Adding a certificate is completed.

For Mozilla Firefox (Windows/Macintosh)

This section assumes the following:

  • Mozilla Firefox 3.5 is used as a Web browser.
  1. Get the client certificate and its password from your system administrator.
  1. On Windows, select "Tools" > "Options" from your web browser menu bar.
    • On Macintosh: Select "Firefox" > "Preference".
    • The menu bar is not displayed: Select "Firefox" > "Options".
  1. Click "Encryption" tab of "Advanced", and click View Certificates.
    "Options" screen
  1. Click "Your Certificates" tab, and ClickImport.
    "Certificate Manager" screen
  1. Select the client certificate (********.pfx) provided by your system administrator, and clickOpen. Then the "Change Master Password" screen or the "Password Entry Dialog" screen may appear. Set the password as required.
  1. Enter the client certificate password, and clickOK.For the client certificate password, contact your system administrator.
    "Password Entry Dialog" screen
  1. ClickOK. Adding a certificate is completed.

For Safari(Macintosh)

On Mac OS X, certificates are stored in a keychain.
To use a client certificate in Safari on Mac OS, you need to add the certificate you want to use to your keychain.

This section assumes the following:

  • OS: Mac OS X 10.6.8
  • Web browsers: Safari 5
  • Client certificate: Client certificate for Cybozu cloud service, including access information for external access
Tip
  • For instructions on Mac OS, see the Apple website:
  • When you use a client certificate for Remote Service:
    Note that Remote Service does not support Safari for Mac.
    You cannot use a client certificate for Remote Service in Safari.

    Remote Service: System requirements This page is available only in English.

  1. Obtain a client certificate and the password from your system administrator.
  1. Double click the client certificate file (******.pfx).
  1. Enter the client certificate password, and click "OK".

The client certificate is added to your keychain automatically.

  1. Open "Keychain Access" and double-click the client certificate for "your domain name.s.cybozu.com". "Root certificate authority" appears.
  1. Click "Trust" in "Root certificate authority". For the client certificate password, consult your system administrator.
  1. From the "When using this certificate:" drop-down list, select "Always Trust" and close the window.
  1. Enter the name and password of an administrator of your computer and click "OK".

When the client certificate is added successfully, a plus sign (+) is added to the icon.

  1. Control-click the certificate and select "New Certificate Preference".
  1. In the "Location or Email Address:" field, enter the "Access URL" (https://your domain name.s.cybozu.com/") listed on the "Prepare for external access" screen and click "Add".
  1. Close "Keychain Access".
  1. Start Safari, in the address bar of the Web browser, enter the "Access URL" (https://your domain name.s.cybozu.com/"). A prompt for confirmation appears.
  1. Click "Always Allow". The login page for cybozu.com you are using appears.

You have finished adding the client certificate to your keychain.

For Safari (iPhone/iPad)

This section assumes the following:

  • Safari 4 is used as a Web browser.
Note
  • For users of Gmail
    You cannot open the client certificate (********.pfx) using Gmail for iOS.
    You can open the client certificate attached to your e-mail by accessing Gmail from Safari instead.
  1. Get the client certificate and its password from your system administrator.
  1. Tap the client certificate (********.pfx).
  1. TapInstall.
    "Install profile" screen
  1. TapInstall now.
    "Installing profile" screen
  1. Enter the client certificate password, and tapNext. For the client certificate password, contact your system administrator.
    When a passcode has been set for your Smartphone, enter the passcode before entering the client certificate password.
    Smartphone passcode can be set in GeneralSettings> GeneralGeneral >  Passcode Lock.
    "Enter Password" screen
  1. TapDone. Adding a client certificate is completed by now.
    "Profile Installed" screen

Replacing a client certificate

This section describes how to replace the client certificate to a new one.

  1. Get a new client certificate and its password from your system administrator.
  1. Remove an old client certificate.
  1. Add a new client certificate.

Removing a client certificate

Remove a client certificate from your Web browser.

  • The procedure for removing a client certificate varies depending on the Web browser that you are using.

For Internet Explorer (Windows)

This section assumes the following:

  • Internet Explorer 8 is used as a Web browser.
  1. Select "Tools" > "Internet Options" from your web browser menu bar.
  1. Click "Content" tab, and clickCertificates.
    "Internet Options" screen
  1. Click "Personal", select the client certificate that you want to remove, and clickRemove.
    "Certificates" screen
  1. ClickYes.Removing a client certificate is completed.

For Mozilla Firefox (Windows/Macintosh)

This section assumes the following:

  • Mozilla Firefox 3.5 is used as a Web browser.
  1. On Windows, select "Tools" > "Options" from your web browser menu bar.On Macintosh, select "Firefox" > "Preference".
  1. Click "Encryption" tab of "Advanced", and click View Certificates.
    Option
  1. Click "Your Certificates" tab, select a certificate you want to remove, and click Delete.
    Certificate Manager
  1. ClickOK. Then the "Master Password Entry Dialog" screen may appear. Enter the password as required.
    Removing a client certificate is completed.

Tip
  • What is a master password?
    A master password is a password set in Mozilla Firefox for protecting the user name and password.
    When a master password has been set, you must also enter the master password before entering a user name and password required for accessing the web site on Mozilla Firefox.

For Safari (Macintosh)

On Mac OS X, certificates are stored in a keychain.
To remove a client certificate from Safari on Mac OS, you need to remove the certificate from your keychain.

This section assumes the following:

  • OS: Mac OS X 10.6.8
  • Web browsers: Safari 5
  • Client certificate: Client certificate for Cybozu cloud service, including access information for external access
Tip
  • For instructions on Mac OS, see the Apple website:
  • When you use a client certificate for Remote Service:
    Note that Remote Service does not support Safari for Mac.
    You cannot use a client certificate for Remote Service in Safari.

    Remote Service: System requirements This page is available only in English.

  1. Open Keychain Access.
  1. Control-click the certificate you want to remove and select "Delete 'name of certificate '".
  1. In the confirmation prompt, click "Delete".
  1. Control-click the certificate for "your domain name.s.cybozu.com" and select "Delete 'your domain name.s.cybozu.com'".
  1. In the confirmation prompt, click "Delete".
  1. Enter the name and password of an administrator of your computer and click "OK".
  1. Control-click the certificate for "your domain name.s.cybozu.com" and select "Delete 'your domain name.s.cybozu.com'".
  1. In the confirmation prompt, click "Delete".

The client certificate is removed from your keychain.

You have finished removing the client certificate from your keychain.

For Safari (iPhone/iPad)

This section assumes the following:

  • Safari 4 is used as a Web browser.
  1. Tap Generalsettings, and tap GeneralGeneral.
  1. Tap "Profile" to select the configuration profile.
    "General" screen
  1. TapRemove.
    "Install profile" screen
  1. TapRemove.
    "Remove Profile" screen