Generate your client certificate
After DigiCert processes your client certificate order, DigiCert sends you an email with a link to generate your certificate. Use DigiCert's new KeyGen tool to perform browser-based certificate key generation. KeyGen generates a keypair and uses the public key to create a certificate signing request (CSR). KeyGen sends the CSR to DigiCert, and DigiCert returns the certificate. KeyGen then downloads a PKCS12 (.p12) file that contains the certificate and the private key.
Before you begin
Your browser determines which method you use to generate your client certificate.
Notice
By default, Microsoft Edge does not support key generation. To use Microsoft Edge, enable IE mode for Edge. IE mode allows you to generate the keys for your client certificate in Microsoft Edge. See What is Internet Explorer (IE) mode for instructions on enabling IE mode.
Generate your client certificate: Microsoft Edge, Safari, Google Chrome, and Firefox
Open one of the following supported browsers:
Windows: Microsoft Edge, Google Chrome, or Firefox
macOS: Safari, Google Chrome, Firefox, or Microsoft Edge
In the email that DigiCert sent you, select the link.
On the Generate your DigiCert certificate page, verify that the name, email address, and organization are correct.
Create and confirm your certificate password.
You use this password each time you install your certificate. Store it safely, such as in a password manager. If you forget your password, you cannot install the certificate.
Password troubleshooting tip
If you receive the "Password you entered is incorrect" error message, verify that the characters used in your password are supported by the browser's Import Wizard. For example, the symbol € is not supported in the Microsoft Edge Import Wizard.
Avertissement
If you lose your password, contact your CertCentral account administrator. They need to reissue your certificate.
Read the Master Service Agreement and select I agree to the terms of the subscriber agreement.
Select Generate certificate.
Verify that your .p12 certificate file was successfully generated and downloaded.
Use your password to open the .p12 file and install your client certificate in your personal certificate store.
When the browser presents your client certificates, select your newly generated client certificate and select OK.
Generate client certificate: Microsoft Edge – IE mode
Open Microsoft Edge in IE mode on Windows.
In the email DigiCert sent you, select the link.
On the Generate your DigiCert certificate page, verify that the name, email address, and organization are correct.
Read the Master Service Agreement and select I agree to the terms of the subscriber agreement.
Select Generate certificate.
Et ensuite ?
If you are using the client certificate to sign and encrypt emails, export your certificate from the Windows certificate store, Keychain Access, or Firefox certificate store. Then, install it in your email client.
Export and installation steps depend on your browser:
Microsoft Edge and Google Chrome install client certificates in the Windows Certificate Store. Chrome and Microsoft Edge can access and use these client certificates. To use a client certificate with Firefox, you need to export a copy from the Windows Store. Then, install it in Firefox.
Safari, Google Chrome, and Microsoft Edge install client certificates in the Keychain Access. Safari, Chrome ,and Microsoft Edge can access and use these client certificates. To use a client certificate with Firefox, export a copy from Keychain Access and install it in Firefox.
Firefox installs client certificates in the Firefox certificate store. Only Firefox can access these certificates. To use the client certificate with Chrome, Safari, or Microsoft Edge, you need to export a copy from the Firefox certificate store. Then, install the client certificate in the operating system's certificate store.
For more information see Managing your client certificate.