Generating certificate files


	Contents Generating certificate files Deciding whether to password protect your private key What to do with your certificate file Generating certificate files You can't use FirstClass to generate your certificate file. You must use an external application, such as Outlook Express. This procedure assumes that you are using Outlook Express version 5 or 6. To generate your certificate file: 1 Choose Tools > Options. 2 Click Digital IDs on the Security tab. 3 Choose Secure Email at "Intended purpose". 4 Select your certificate. 5 Click Export. 6 Follow the prompts. When asked: • export the private key • include all certificates in the certification path • enable strong protection. You will also be asked to provide a password for the private key. This is actually optional, and you must be aware of the implications if you password protect your private key. Top Deciding whether to password protect your private key A password protected private key provides an additional layer of security. With a password protected private key, only you can use this certificate to send S/MIME messages, because your password must be provided with every S/MIME message that is sent. However, FirstClass can't decrypt S/MIME messages received by someone with a password protected private key. Message recipients will see a blank message with an encrypted attachment. They will have to download the attachment and use an external application to decrypt it. If you choose not to supply a password, FirstClass can automatically decrypt S/MIME messages. Note Normally, a certificate provided by your organization doesn't require a password protected private key. Top What to do with your certificate file After you have generated your certificate file, send it to your administrator, who will store it in a location where FirstClass can access it. You must tell your administrator the email address you used when you ordered the certificate. If you don't remember the address, do the following (again, this assumes you are using Outlook Express version 5 or 6): 1 Choose Tools > Options. 2 Click Digital IDs on the Security tab. 3 Select your certificate. 4 Click View. 5 Select "Subject" on the Details tab. The "E =" value is the email address. Top