1. description of user certificates
The service for the creation of trusted certificates (TCS=Trusted Certificate Service) is a PKI service that DFN-Verein obtains from GÉANT. GÉANT realises the service with the help of external providers who are found through regular tenders. The current provider is Sectigo. Many functions of Sectigo's certificate manager can be used after logging in via the DFN-AAI.
DFN-Verein operates the AAI (authentication and authorisation infrastructure) to provide users with access to protected resources. Users authenticate themselves at their home institution (e.g. Anhalt University of Applied Sciences) and, after transferring the data required for authorisation (university access data) to the relevant service, are granted access to the resources released by the university.
Anhalt University of Applied Sciences mainly operates its services internally, but uses the AAI of DFN-Verein for the authentication of users when applying for the user certificate.
Authorised users are identified for the first and last time or once only when the person in question is hired or matriculates by comparing them with official identification documents. Once the person has been identified, they can login and generate their own user certificate at https://cm.harica.gr.
Generated certificates can be used for electronic authentication and for encryption purposes.
The ISC and the respective administrators in the organisational units are responsible for this:
Issuing certificates for servers
Advising users on how to apply for certificates independently
2. authorised users
Certificates can be requested by all members of Anhalt University of Applied Sciences (HSA).
3. application
The application for a user certificate can be made independently by the user with the university access data. To do this, select the menu item "Email" in the left menu unter "Certificate Requests" and follow the wizard. The certificate is valid for a maximum of 2 years (730 days) from the date of application and is secured with the RSA algorithm and a key length of 2048 bits.
4. electronic signature with certificate
File signing with the user certificate created via Harica in Adobe Acrobat Reader is now possible. Instructions for signing files can be found in the Support portal.
5. support
Further information and support can be found in the Support portal.
If you still have a valid DFN certificate, you will receive an e-mail directly from the DFN informing you about the expiry of the user certificate and the possibility of issuing a new certificate via the current provider of GÉANT TCS (Harica) (click on the image to enlarge it). This is not phishing.
© ISC@HSA
