Difference between revisions of "HowTo:Install UBIK Client Certificate"
(→Certificate list) |
|||
| Line 20: | Line 20: | ||
{{Attention|A file browser app has to be installed on your device in order to select the certificate file from the SD-card.}} | {{Attention|A file browser app has to be installed on your device in order to select the certificate file from the SD-card.}} | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
== Automatic Import == | == Automatic Import == | ||
| Line 46: | Line 39: | ||
{{Hint|The certificate will remain on the device even if the application is reinstalled.}} | {{Hint|The certificate will remain on the device even if the application is reinstalled.}} | ||
| − | + | = WinX = | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | = | + | |
=== Install Root Authority Certificate === | === Install Root Authority Certificate === | ||
If the client connects to a webservice, it needs to check if the connection can be established by fullfilling a root authority certification. Therefore the certificate of the root authority has to be installed. | If the client connects to a webservice, it needs to check if the connection can be established by fullfilling a root authority certification. Therefore the certificate of the root authority has to be installed. | ||
| Line 66: | Line 52: | ||
* [[HowTo:Install_UBIK_Web_Service|Install {{UBIK}} Web Service]] | * [[HowTo:Install_UBIK_Web_Service|Install {{UBIK}} Web Service]] | ||
* [[Web_Service_Configuration|Web Service Configuration]] | * [[Web_Service_Configuration|Web Service Configuration]] | ||
| − | |||
| − | |||
| − | |||
| − | |||
{{Category/Version|2.3.1}} | {{Category/Version|2.3.1}} | ||
| Line 77: | Line 59: | ||
[[Category:Installing|Install UBIK Client Certificate]] | [[Category:Installing|Install UBIK Client Certificate]] | ||
[[Category:Version 2.3|Install UBIK Client Certificate]] | [[Category:Version 2.3|Install UBIK Client Certificate]] | ||
| − | |||
[[Category:Version 2.5|Install UBIK Client Certificate]] | [[Category:Version 2.5|Install UBIK Client Certificate]] | ||
| + | [[Category:Windows|Install UBIK Client Certificate]] | ||
Revision as of 15:19, 25 November 2015
This how-to describes how to set up a client certificate to enable a secure channel to the web service.
Android
Manual installation
One can add server certificates to the UBIK® Android application () in addition to the pre-installed certificates, using a button in the Info menu.
- Copy the certificate to your device's SD card where you can find it easily.
- Open the UBIK Android application.
- Press the Home button in the Action Bar.
- Press the Info button in the drop-down menu.
- On the Info screen, press the Install Certificate button.
- Select a file browser in order to select the certificate file.
- Choose the certificate file you earlier copied to the device's SD card.
If the adding was successful, a toast message confirming the installation will appear. Else, the toast's text will indicate an error.
The certificate will be stored in a BouncyCastle keystore on the device's file system (path: SD-Card/UBIK/Certificates). This means you can copy this keystore and reuse it on another device by pasting it there!
 | A file browser app has to be installed on your device in order to select the certificate file from the SD-card. |
Automatic Import
One can place certificate files in a predefined folder in order for them to be imported automatically when the app () starts up the next time. The folder depends on the app:
<sd-card>/Android/data/com.augmensys.ubik.<custom_app>/files/cert
Certificate list
In the Info screen (), there is a button Show certificates that opens a list of all installed certificates, displaying their subject and expiry date.
| The certificate has to be provided as a X.509 DER encoded file, e.g. *.cer |
 | The certificate will remain on the device even if the application is reinstalled. |
WinX
Install Root Authority Certificate
If the client connects to a webservice, it needs to check if the connection can be established by fullfilling a root authority certification. Therefore the certificate of the root authority has to be installed.
To import the certificate, start the certificate manager by entering Manage computer certificates in the Windows 8 Start Screen (alternatively, start the program certmgr):
- Go to section Trusted Root Certification Authorities and open the context menu.
- Click on All Tasks
- Use Import... to import the Root Certificate provided as *.cer file.
