Installation of certificates in Windows

In order to use the ID-card and verify the signatures issued with the ID-card, it is necessary to install the SK root certificates into the system. It is mostly carried out automatically upon installation of drivers for the ID-card. However, it can also be done manually, for example in cases where the computer lacks a smart card reader or the ID-card drivers.

Download the certificates here. You need the JUUR-SK and ESTEID-SK certificates for normal functionality.

Windows keeps the certificates in its system’s Certificate Store. Once a certificate has been installed in the store, it becomes usable by all programs that can interact with the store.

The example below illustrates how to install the SK root certificate into a computer that has never had anything to do with ID-cards.

1. Download the SK root certificate from here (either in DER or PEM format).

2. Find the certificate on your hard drive and open it, by double-clicking it in Windows Explorer, for example. The following window will appear.

3. Click on “Install Certificate…”. The following window will open.

4. Click on “Next”. The following window will appear.

5. Leave the “Automatically select the certificate store based on the type of certificate” option selected and click on “Next”. The following window will appear.

6. Click on “Finish”. The following window will appear. It means that you are asked for a confirmation for adding the certificate to the list of trusted certificates. As all other certificates originate from the trusted certificates, it is vital for you to be absolutely certain of the validity authenticity of the certificate. Check the homepage of the Certification Centre and make sure that the fingerprint “Thumbprint(sha1)” matches the one found on the homepage (disregard the spaces).

7. Being certain of the authenticity of the certificate, click on “Yes”. You will see the following window, which means that the certificate has been successfully installed.

Viimati uuendatud: 21.06.2007