Instructions for admins on global setup of the access certificate and IP based access in DigiDoc3 Client

The below instructions are intended for administrators who need to globally set up the access certificate required for digital signing, access certificate location and password or IP based access. To prevent the end users from changing these settings we will also explain how to lock global settings with the lock parameter. 

Installing the access certificate
 
Global settings are stored in the digidocpp.conf file that can be found at:
  • for Windows - C:\Program Files\Open-EID\digidocpp.conf
  • for Linux - /usr/etc/digidocpp/digidocpp.conf
  • for Mac OS X- /Applications/qdigidocclient.app/Contents/Frameworks/digidocpp.framework/Resources/digidocpp.conf
To globally set up the access certificate, complete the following steps:
  • open the global settings file digidocpp.conf and find the following rows from the file:

<!--<param name="pkcs12.cert" lock="false"></param>-->
<!--<param name="pkcs12.pass" lock="false"></param>-->

  • for both rows delete comment tags <!-- and -->
  • set up the path to the access certificate (file with the .p12  extenstion) received from Certification Centre (parameter pkcs12.cert)
  • set up the access certificate password receieved from Certification Centre (parameter pkcs12.pass)
To prevent the end users from accidentally changing access certificate settings DigiDoc3 Client (e.g. password, file location), lock global settings with the "lock" parameter:

<param name="pkcs12.cert" lock="true"></param>
<param name="pkcs12.pass" lock="true"></param>

Setting up the IP based access

To globally set up the IP based access, complete the following steps:
  • open the global settings file digidocpp.conf and find the following row from the file:

<!--<param name="pkcs12.disable" lock="false">false</param>-->

  • delete comment tags <!-- and --> 
  • replace the values false (appears twice) with the value true and save the changes

Now DigiDoc3 Client has been set up to use the IP based access. If the end user changes the settings, the lock parameter will reset them back to the IP based access next time the user opens DigiDoc3 Client.

Note! If you need to update the ID card software, you will also have to update the digidocpp.conf file.

ASK FOR HELP

If you didn't find an answer to your question, send it to our team.



  • See instructions
  • Please estimate your ability to use the computer, so that we can provide you with the best guidance

         

  • Verification failed

How can we improve the article and be more helpful?
Send Close