web analytics
en English
X

Select Language

Powered by Google TranslateTranslate

We hope you will find the Google translation service helpful, but we don’t promise that Google’s translation will be accurate or complete. You should not rely on Google’s translation. English is the official language of our site.

en English
X

Select Language

Powered by Google TranslateTranslate

We hope you will find the Google translation service helpful, but we don’t promise that Google’s translation will be accurate or complete. You should not rely on Google’s translation. English is the official language of our site.

How to Order and Install Personal Pro Email and ClientAuth Certificates

This how-to will walk you through the process of ordering, validating, and retrieving a Personal Pro Email and ClientAuth Certificate from SSL.com.

This how-to will walk you through ordering and installing a Personal Pro Email and ClientAuth certificate from SSL.com. These affordable certificates offer S/MIME email protection, identity validation and client authentication for as little as $30 per year, and are a great way to prevent phishing while also providing a secure authentication factor for company web portals and other applications.

BUY PERSONAL PRO CERTIFICATES

Note: This article covers the ordering and issuance of individual certificates in SSL.com’s user account portal. With an EPKI agreement from SSL.com, you can also issue certificates in bulk for your company or other organization.

Ordering

  1. Go to the product page for Personal Pro Email and ClientAuth certificates and click the Buy Now button.

    Buy Now button

  2. Choose a duration for your certificate and click the Add to Cart button to add the certificate to your shopping cart.

    select duration and add to cart

  3. In the shopping cart, you can change the quantity of certificates, remove them from your cart, or return to shopping with the Shop More button. When your order is complete and correct, click Checkout.

    Shopping cart

  4. If you are not already logged into your SSL.com account or do not have an account yet, you will be prompted to login or create a new account at the Checkout screen. If you have an account, select I do and I want to log in now, enter your username and password, then click the Next >> button.

    Checkout

  5. If you do not have an SSL.com account, select I do NOT but I want to create one, fill in the requested information (username, email address, password, and billing information), then click the Next >> button.

    Create new account

  6. If your account contains existing funds, they will be applied to your purchase. If your account does not contain sufficient funds, you will be prompted to add more. Click the Next >> button when your account has sufficient funds to complete the transaction.

    Apply existing funds

  7. If your order has been successfully placed, you will see a green alert near the top of the browser window, reading “Order successfully placed…” Click the Click here link under Show Order Transaction or the green order number beginning with “co-” in the order details.

    Finish processing

  8. Enter recipient information (First Name, Last Name, and Email Address), then click Next>>. You can also choose previously-saved information by using the Saved Recipients drop-down menu.

    Recipient information

  9. Next, upload files to validate your identity. For Personal Pro certificates, please send images of the front and back of a government-issued photo ID, plus a photograph of yourself holding the ID next to your face. Each photograph should be at least 5 megapixels in size (most current smartphone cameras are 8-12 megapixels). Use the Choose Files button to browse for files.
    Choose files

  10. When you are done adding files, click the Submit button.

    Submit

  11. You will be returned to a page with information about the certificate order. There should be a green alert at the top of the screen indicating that your documents were successfully uploaded. Note that your order will have the status of pending validation until the information you submitted has been validated.

    pending validation

  12. When the documents you uploaded have been validated by our staff, the recipient address (specified in step 8 above) will receive an email with a link to collect the certificate. Click the link.

  13. Click the Generate Certificate button to generate a new certificate signing request (CSR), certificate, and private key.

    Note: If you want to specify the algorithm, you can choose between RSA and ECDSA with the Algorithm drop-down menu. You can also click the Show Advanced Options button, which will reveal a drop-down menu for choosing the key size. Finally, checking I have my own CSR will let you use your own certificate signing request and private key rather than generating a new CSR and key.

    Generate Certificate

  14. Text fields containing the new CSR, certificate, and private key will appear.

    CSR, Certificate, and Private Key

  15. To download a PFX file containing your new certificate and private key to your computer, create a password of 6 characters or more, then click the Download button. Remember this password. You will need it when you install the certificate and key on your computer. Also, it is very important that you keep your private key secure and do not lose it. SSL.com does not ever see or handle your private keys and cannot help you recover a lost key (it will be generated in your browser, on your own computer). Without your private key you will not be able to digitally sign email or read email that has been encrypted with your public key. Even worse, anyone with your private key will be able to assume your identity for signing email messages and client authentication.

    Download PFX

Installation

For most applications supporting S/MIME or Client Authentication, you can simply follow the instructions below to install your downloaded PFX file in the OS certificate store and your email client or web browser will be able to access the certificate. However, Mozilla Thunderbird and Firefox require additional configuration steps:

Windows

These procedures were documented on Windows 10 Enterprise version 1809.

  1. Double-click the PFX file you downloaded to open it. The filename will end with .p12
    Open PFX file
  2. The Certificate Import Wizard will open. Select Current User, then click the Next button.
    Select Current User
  3. The next window will ask you to specify a file to import. The file you double-clicked in step 1 should already be selected, so click the Next button to continue.
    Specify file
  4. Enter the password you created when you downloaded the PFX file from SSL.com.  Under Import Options, make sure that Include all extended properties is checked. If you want to be prompted for your PFX password every time the private key is used (e.g. for signing), check Enable strong private key protection. If you would like to be able to export a PFX containing the private key at a later date, check Mark this key as exportable. When you are done selecting options, click the Next button.
    Private key protection
  5. Make sure that Automatically select the certificate store based on the type of certificate is checked, then click the Next button.
    Automatically select certificate store
  6. Click the Finish button.
    Finish
  7. If you selected Enable Strong Private Key Protection in step 4, then the Importing a new private exchange key dialog box will appear. Click the OK button to continue.
    Importing a new private exchange key
  8. You’re all finished! Click the OK button to exit the wizard.
    The import was successful

macOS

These procedures were documented on macOS 10.14.6 (Mojave).

  1. Open Keychain Access.app, located in Applications > Utilities.
    Keychain Access
  2. Select the login keychain.
    login keychain
  3. Select File > Import Items from the menu.
    Import Items
  4. Navigate to the PFX file you downloaded from SSL.com, then click the Open button. Note that the filename will end with .p12.
    open file
  5. Enter the password you created when downloading the PFX file and click the OK button.
    Enter PFX password
  6. If prompted, enter your login password and click the OK button to unlock the Login keychain.
    Enter login password
  7. The certificate and private key are now installed on the computer.
    Certificate and private key installed
Note: If an error message appears that reads “An error occurred. Unable to import the certificate. Error: -26276,” click the OK button to dismiss the message and then check in Keychain Access to check whether the certificate and private key were actually installed. This message appears to be a common glitch on at least some versions of macOS, and may appear despite the fact that the PFX was successfully imported.

An errot occurred. Unable to import the certificate. Error: -26276

Thank you for choosing SSL.com! If you have any questions, please contact us by email at Support@SSL.com, call 1-877-SSL-SECURE, or just click the chat link at the bottom right of this page. You can also find answers to many common support questions in our knowledgebase.

 

Subscribe to SSL.com’s Newsletter

Don’t miss new articles and updates from SSL.com