Skip to main content

Import a certificate

You can import a certificate in any of the following formats:

  • X.509 (.cer or .pem)

  • PKCS#7 (.p7b)

  • PKCS#12 (.p12 or .pfx)

  • GLCK (.glck)

Note

GLCK is a DigiCert proprietary key store format to secure the certificate. It can include both keys and certificates. You can import certificates that were exported from the DigiCert PKI Client and used by the DigiCert PKI Platform 8 solution.

To import a certificate, perform the following steps:

  1. From the left navigation menu, select Tokens.

    Note

    You may need to log in to the token first for session-managed tokens for the Import certificate option to be available in the menu.

  2. Select Quick actions > Import certificates.

  3. Browse to the certificate and select Import.

    If you select PKCS#12 or GLCK, enter the password and click Verify.

  4. (Optional) If the file also contains a Certificate Authorities (CA), select the Certificate Authorities (CA) that you want to import.

Note

The import of CA certificates is available only on Windows. For Yubikey, CA import is not supported due to space limitations.

Warning

In the Windows Certificate Store, a duplicate certificate existing on another token will be replaced by the one in the token. This is due to a restriction on Windows, so the existing one is removed.

In this section: