Requesting user certificate for email and HIP

MYCERT 10-010

Important information

You need a user certificate in order to sign invoices correctly in the internal university portal (HIP). You do not need a certificate for any other applications in HIP.

What you need to know

You can obtain a user certificate from Harica for verifying emails and signing invoices in HIP.

Important: The certificate issued can only be used for verifying emails and in HIP. Unfortunately, it cannot be used to verify PDFs, for example!

What you have to do

  1. Enter the following address in your browser: External link opens in a new window:https://cm.harica.gr/login

    • The Harica login page is displayed.

    • If you have already installed a certificate from Gèant Sectigo, you will receive a (yellow) message in HIP stating that your certificate is not accepted (see Figure 1.2). You must therefore remove this certificate from your browser before installing the new certificate. For more information, see the help card Remove user certificate in browser (MYCERT 10-026).

    • 1.1
    • 1.2

  2. Click on the “Academic Login” button below the login area.

    • 2.1

  3. Search for “Hochschule Furtwangen” in the institution selection and confirm your selection.

    • 3.1

  4. Log in with your HFU account (if you haven't already done so) and confirm the data transfer to Harica.

    • Your personal Harica dashboard will be displayed.

    • 4.1
    • 4.2

  5. Go to the “Email” menu item to start the certificate request.

    • The certificate selection is displayed.

    • 5.1

  6. In the first step, select the free “Email-only” certificate type by clicking on ‘Select’ and then confirm the stored email address by clicking on “Next.”

    • By logging in with your HFU account, your email address has already been filled in for you.

    • 6.1
    • 6.2

  7. Now confirm the validation method you have set by clicking “Next”.

    • 7.1

  8. Check the box to indicate your consent under the application overview before clicking “Submit”.

    • The certificate request has been sent, and you will be redirected back to the dashboard with the pending request.

    • 8.1
    • 8.2

  9. You will now receive an email from Harica. Confirm your email address by clicking “Confirm” in the email.

    • You will be redirected to Harica's confirmation page.

    • If the link does not lead to a confirmation page, or if the “Enroll your Certificate” button is not displayed after logging into Harica, try opening the confirmation link in a different browser.

      To do this, log in to Harica using another browser (e.g., Edge or Chrome) so that you can see the dashboard. Then copy the link address from the confirmation email by right-clicking on the “Confirm” link and selecting “Copy hyperlink” from the menu. Then paste the copied link into the address bar of the new browser and open it.

  10. On the Harica confirmation page, click “Confirm” again to complete the confirmation process.

    • Your email address has been validated and you will be redirected to the dashboard.

    • 10.1
    • 10.2
      Enlarge image
      Dashboard with confirmed certificate

      The heading should now have changed from “Pending” to “Ready.”

  11. On your dashboard, click “Enroll your Certificate” next to the certificate entry.

    • The “Certificate Enrollment” window opens.

    • 11.1

  12. Fill out the form as follows:

    • Select RSA as the encryption algorithm (“Algorithm”).
    • Select 4096 as the “Key size”.
    • Set a password and enter it twice.
    • Check the confirmation box to confirm that you will manage the password yourself.
    • Finally, click on “Enroll Certificate” to save your entries and complete the process.
    • Check the box to confirm that you manage the password yourself.

     

    • Please note that you will need the password you have chosen here again to integrate certificates into email programs. Therefore, please make a note of your password in a safe place or use a password manager.

    • The certificate is created and the download window opens.

    • 12.1
      Enlarge image
      Create certificate

      Before the certificate can be downloaded, a few settings must be configured.

  13. Now click on the “Download” button to download the certificate.

    • Please do not skip this step! You will not be able to download the certificate you just created later!

    • The certificate has been successfully downloaded and can now be integrated into Outlook.

    • The name of your certificate file may differ from the name “certs” shown in Figure 13.2. You are welcome to use a descriptive name of your choice here, as the file name is not crucial for the successful completion of the import.

    • 13.1
    • 13.2

  14. To install and integrate the certificate you have created, please follow the help card Internal link opens in the same window:Installing a user certificate on Windows (MYCERT 10-020). When you install the certificate on Windows, it is automatically imported into Outlook, Microsoft Edge, Google Chrome, the current version of Firefox, or other browsers that use the system certificate store.

    If you want to use Thunderbird, please also use the help card Importing the user certificate into Thunderbird (MYCERT 10-030).

  15. The newly created certificate is now valid for two years.

Problems or questions?