~ubuntu-branches/ubuntu/precise/kompozer/precise

<div class="boilerplate">This document is provided by Mozilla for your information only. It may help you take certain steps to protect the privacy and security of your personal information on the Internet. This document does not, however, address all online privacy and security issues, nor does it represent a recommendation by Mozilla about what constitutes adequate privacy and security protection on the Internet.</div>

<hr>

<h1>Certificate Manager</h1>

<p>This section describes how to use the Certificate Manager. For more information on using certificates, see <a href="using_certs_help.html">Using Certificates</a>.

<p>If you are not currently viewing the Certificate Manager window, follow these steps:

<ol>

<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.

<li>Under the Privacy & Security category, click Certificates. (If no subcategories are visible, double-click Privacy & Security to expand the list.)

<li>Click Manage Certificates.

</ol>

<tr>

<p>In this section:</p>

<p><a href="#My_Certificates">Your Certificates</a></p>

<p><a href="#Other_Peoples_Certificates">Other People's Certificates</a></p>

<p><a href="#Web_Site_Certificates">Web Site Certificates</a></p>

<p><a href="#CA_Certificates">Authorities</a></p>

</td>

</tr>

</table>

<hr>

<a NAME="My_Certificates"></a><h2>Your Certificates</h2>

<p>The Your Certificates tab in the <A href="#certs_first">Certificate Manager</a> displays the certificates on file that identify you. Your certificates are listed under the names of the organizations that issued them:

<ul>

<li>If you can't see certificate names under an organization's name, double-click the name.

<li>To select a certificate, click its name.

<li>To select more than one certificate, hold down the Control key and click their names.

</ul>

<p>To perform the following actions, select one or more certificates and click one of the following buttons:

<UL>

<LI><b>View:</b> Display detailed information about the selected certificates.</LI>

<LI><b>Backup:</b> Initiate the process of saving the selected certificates. A window appears that allows you to choose a password to protect the backup. You can then save the backup in a directory of your choice.</LI>

<LI><b>Delete:</b> Delete the selected certificates.</LI>

</UL>

<P>These actions do not require a certificate to be selected:</P>

<UL>

<LI><b>Import:</b> Import a file containing one or more certificates that were previously backed up. When you click Import, Certificate Manager first asks you to locate the file that contains the backup. The names of certificate backup files typically end in <tt>.p12</tt>; for example, <tt>MyCert.p12</tt>. After you select the file to be imported, Certificate Manager asks you to enter the password that you set when you backed up the certificate.</LI>

<LI><b>Backup All:</b> Initiate the process of saving all the certificates stored in the <a href="glossary.html#software_security_device">Software Security Device</a>.

<p><b>Note: Certificates on smart cards cannot be backed up.</b> Whether you select some of your certificates and click Backup, or click Backup All, the resulting backup file will not include any certificates stored on smart cards or other external security devices. You can only back up certificates that are stored on the built-in Software Security Device.

</UL>

<H3>Choose a Certificate Backup Password</H3>

<P>A certificate backup password protects one or more certificates that you are backing up from the <a href="#My_Certificates">Your Certificates</a> tab in the Certificate Manager.

<p>The Certificate Manager asks you to set this password when you back up certificates, and requests it when you attempt to import certificates that have previously been backed up.</P>

<ul>

<li><b>Certificate backup password:</b> Type your backup password into this field.

<li><b>Certificate backup password (again):</b> Type your backup password again. If you don't type it the second time exactly as you did the first time, the OK button remains inactive. If this happens, try typing the new password again.

</ul>

<p>If someone obtains the file containing a certificate that you have backed up and successfully imports the certificate, that person can send messages or access web sites while pretending to be you. This can be a problem, for example, if you digitally sign important email messages or manage your bank or investment accounts over the Internet.

<p>Therefore, it's important to select a certificate backup password that is difficult to guess. The <b>password quality meter</b> gives you a rough idea of the quality of your password as you type it based on factors such as length and the use of uppercase letters, lowercase letters, numbers, and symbols. It does not guarantee that your password cannot be guessed, however.

<p>For further guidelines, see the online document <a href="http://home.netscape.com/security/basics/passwords.html" TARGET="_blank">Choosing a Good Password</a>.

<p>It's also important to record the password in a safe place—and not anywhere that's easily accessible to someone else. If you forget this password, you can't import the backup of your certificate.</p>

100

101

102

103

104

<h3>Delete Your Certificates</h3>

105

106

<P>Before deleting one of your own expired certificates from the <a href="#My_Certificates">Your Certificates</a> tab in the Certificate Manager, make sure you won't need it again some day for reading old email messages that you may have encrypted with the corresponding private key.

107

108

109

110

</P>

111

112

113

114

115

<h2>Other People's Certificates</h2>

116

117

<p>The Other People's tab in the <A href="#certs_first">Certificate Manager</a> displays email certificates you have on file that identify other people.

118

119

<p>When people send you digitally signed email messages, Certificate Manager imports their certificates automatically. You can use these certificates to send encrypted messages to those people.

120

121

<p>Other people's certificates are listed under the names of the organizations that issued them:

122

123

<ul>

124

<li>If you can't see certificate names under an organization's name, double-click the name.

125

<li>To select a certificate, click its name.

126

<li>To select more than one certificate, hold down the Control key and click their names.

127

</ul>

128

129

<p>To perform the following actions, select one or more certificatesand click one of the following buttons:

130

131

<ul>

132

<li><b>View:</b> Display detailed information about the selected certificates.

133

134

<li><b>Delete:</b> Delete the selected certificates.

135

</ul>

136

137

138

139

140

<h3>Delete Email Certificates</h3>

141

142

<p>Before deleting someone else's certificate from the <a href="#Other_Peoples_Certificates">Other People's</a> tab in the Certificate Manager, make sure you won't need it again some day to send encrypted email to that person or to verify digital signatures on messages from that person.

143

144

145

146

147

<h2>Web Site Certificates</h2>

148

149

<p>The Web Sites tab in the Certificate Manager displays certificates you have on file that identify web sites.

150

151

<p>Web site certificates are grouped under the names of the organizations that issued them:

152

153

<ul>

154

<li>If you can't see certificate names under an organization's name, double-click the name.

155

<li>To select a certificate, click its name.

156

<li>To select more than one certificate, hold down the Control key and click their names.

157

</ul>

158

159

160

161

<p>To perform the following actions, select one or more certificates and click one of the following buttons:

162

163

<ul>

164

<li><b>View:</b> Display detailed information about the selected certificates.

165

166

<li><b>Edit:</b> View or change the trust settings that Certificate Manager associates with the selected certificates. You can use these settings to designate a web site certificate as one that you trust or don't trust for identification purposes.

167

168

<li><b>Delete:</b> Delete the selected certificates.

169

</ul>

170

171

172

173

<h3>Edit Web Site Certificate Trust Settings</h3>

174

175

<p>When you select a web site certificate from the <A href="#Web_Site_Certificates">Web Sites</a> tab in the Certificate Manager and click Edit, you see a window entitled "Edit web site certificate trust settings."

176

177

Here you specify whether you want to trust the selected certificate for identifying the web site and setting up an encrypted connection.<p>

178

179

<p>The dialog box contains these elements:

180

181

<ul>

182

183

<li><b>The certificate "<i>name of certificate</i>" was issued by:</b> Provides information about the <a href="glossary.html#certificate_authority_(CA)">certificate authority</a> that issued this certificate.

184

185

<li><b>Edit certificate trust settings:</b></li>

186

187

<ul>

188

<li><b>Trust the authenticity of this certificate:</b> If you select this option, Certificate Manager will henceforth trust this certificate for the purposes of identifying this web site or setting up an encrypted connection. If you select this option and then attempt to visit the web site, your browser will access the site with few, if any, warnings.

189

190

<li><b>Do not trust the authenticity of this certificate:</b> If you select this option, Certificate Manager will no longer trust this certificate for the purposes of identifying this web site or setting up an encrypted connection. If you select this option and then attempt to visit the web site, you will see one or more warning messages before you can access the site.

191

192

</ul>

193

<li><b>Edit CA Trust:</b> Click this button to specify trust settings for the certificate authority (CA) that issued the web site certificate. These settings allow you to trust or not to trust different kinds of certificates issued by that certificate authority. For example, you can choose to trust all web site certificates issued by the authority.

194

</ul>

195

196

<p>Click OK to confirm your choice.

197

198

199

200

201

<h3>Delete Web Site Certificates</h3>

202

203

<p>Before deleting a web site certificate from the <a href="#Web_Site_Certificates">Web Sites</a> tab in the Certificate Manager, make sure that you won't need it again for the purposes of identifying a web site and setting up an encrypted connection.

204

205

206

207

208

209

210

211

212

<h2>Authorities</h2>

213

214

<p>The Authorities tab in the <A href="#certs_first">Certificate Manager</a> displays the certificates you have on file that identify <a href="glossary.html#certificate_authority_(CA)">certificate authorities (CAs)</a>.

215

216

217

<p>CA certificates are grouped under the names of the organizations that issued them:

218

219

<ul>

220

<li>If you can't see CA certificate names under an organization's name, double-click the name.

221

<li>To select a CA certificate, click its name.

222

<li>To select more than one CA certificate, hold down the Control key and click their names.

223

</ul>

224

225

226

<p>To perform these actions, select the certificates on which you want to act and click one of these buttons:

227

<ul>

228

<li><b>View:</b> Display detailed information about the selected certificates.

229

230

<li><b>Edit:</b> View or change the settings that Certificate Manager associates with the selected certificates. You can use these settings to designate what kinds of certificates, if any, you trust that are issued by the corresponding CAs.

231

232

<li><b>Delete:</b> Delete the selected certificates.

233

</ul>

234

235

<p>To ensure that an entire <a href="glossary.html#certificate_chain">certificate chain</a> of CAs are all trusted, you need to edit the root CA certifiate only.

236

237

<p>To import the chain, you click a link on a web page provided by the CA. You can then use the authorities tab to locate the root certificate and edit its trust settings.

238

239

<p>The root and intermediate CAs all appear under the same organization. The root certificate is the one that lists itself as the the issuer.

240

241

<p><b>If you download an intermediate CA:</b> If you download an intermediate CA certificate that chains to a root certificate already marked as trusted in your browser, you don't have to indicate what purposes you trust it for. Intermediate certificates automatically inherit the trust settings of their roots.

242

243

244

245

<h3>Edit CA Certificate Trust Settings</h3>

246

247

<p>When you select a CA certificate from the <A href="#CA_Certificates">Authorities</a> tab in the Certificate Manager and click Edit, you see a window entitled "Edit CA certificate trust settings." Here you specify the kinds of certificates you trust this CA to certify. If you deselect all the checkboxes, Certificate Manager will not trust any certificates issued by this CA.

248

249

<p>The settings have these effects:

250

<ul>

251

<li><b>This certificate can identify web sites:</b> Certificate Manager will trust certificates issued by this CA for the purpose of identifying web sites and encrypting web site connections. If you deselect this checkbox, Certificate Manager will not trust web site certificates issued by this CA.

252

253

<li><b>This certificate can identify mail users:</b> Certificate Manager will trust certificates issued by this CA for the purpose of signing or encrypting email. If you deselect this checkbox, Certificate Manager will not trust email certificates issued by this CA.

254

255

<li><b>This certificate can identify software makers:</b> Certificate Manager will trust certificates issued by this CA for the purpose of identifying software makers. If you deselect this checkbox, Certificate Manager will not trust such certificates issued by this CA.

256

</ul>

257

258

<p>Click OK to confirm the settings you have selected.

259

260

261

262

263

<h3>Delete CA Certificates</h3>

264

265

<p>Before deleting a CA certificate from the <A href="#CA_Certificates">Authorities</a> tab in the Certificate Manager, make sure that you won't need it again to validate certificates issued by that CA. If you delete the only valid certificate you have for a CA, Certificate Manager will no longer trust any certificates issued by that CA.

266

267

268

269

270

<h1>Device Manager</h1>

271

272

<p>This section describes the options available in the Device Manager window. For background information and step-by-step instructions on the use of the Device Manager, see <a href="using_certs_help.html#using_certs_devices">Manage Smart Cards and Other Security Devices</a>.

273

274

<P>If you are not currently viewing the Device Manager window, follow these steps:

275

276

<ol>

277

<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.

278

<li>Under the Privacy & Security category, click Certificates. (If no subcategories are visible, double-click Privacy & Security to expand the list.)

279

<li>In the Certificates panel, click Manage Security Devices.

280

</ol>

281

282

<p>The Device Manager lists each available PKCS #11 module, and the security devices managed by each module below the module's name.

283

284

<p>When you select a module or device, information about the selected item appears in the middle of the window, and some of the buttons on the right side of the window become available. In general, you perform an action on a module or device by selecting its name and clicking the appropriate button:

285

286

<ul>

287

<li><b>Log In:</b> Log into the selected security device. After you have logged in to the device, the frequency with which you will be asked to enter the master password for the device depends on the <a href="passwords_help.html#Master_Password">Master Password Timeout</a> settings.

288

<li><b>Log Out:</b> Log out of the selected security device. After you have logged out of the device, the device and the certificates it contains will not be available until you log in again.

289

<li><b>Change Password:</b> Change the master password for the selected security device.

290

<li><b>Load:</b> Displays a dialog box that allows you to specify the name and location of a new PKCS #11 module. Before adding a new module, you should first install the module software on your computer and if necessary connect any associated hardware device. Follow the instructions provided by the vendor.

291

<li><b>Unload:</b> Unload the selected module. If you unload a module, both the module and its security devices are no longer available for use by the browser.

292

<li><b>Enable FIPS:</b> Turns the FIPS mode on and off. For more information, see <a href="using_certs_help.html#using_certs_devices_fips">Enable FIPS Mode</a>.

293

294

</ul>

295

296

297

</body>

298

</html>

b'\\ No newline at end of file'

Older »