Certificate Manager

This section describes how to use the Certificate Manager. For more general information on using certificates, see Using Certificates.

If you are not currently viewing the Certificate Manager window, follow these steps:

  1. Open the Edit menu and choose Preferences.
  2. Under the Privacy & Security category, click Certificates. (If no subcategories are visible, double-click the category to expand the list.)
  3. Click Manage Certificates.

 

In this section:

Your Certificates

Other People's

Web Sites

Authorities

 


Your Certificates

The Your Certificates tab in the Certificate Manager displays the certificates on file that identify you. Your certificates are listed under the names of the organizations that issued them:

To perform the following actions, select the certificates on which you want to act and click one of these buttons:

These actions do not require a certificate to be selected:

 


Choose a Certificate Backup Password

A certificate backup password protects one or more certificates that you are backing up from the Your Certificates tab in the Certificate Manager.

The Certificate Manager asks you to set this password when you back up certificates, and requests it when you attempt to restore certificates that have previously been backed up.

If someone obtains the file containing a certificate that you have backed up and successfully restores the certificate, that person can send messages or access web sites while pretending to be you. This can be a problem, for example, if you digitally sign important email messages or manage your bank or investment accounts over the Internet.

Therefore, it's important to select a certificate backup password that is difficult to guess. The password quality meter gives you a rough idea of the quality of your password as you type it based on factors such as length and the use of uppercase letters, lowercase letters, numbers, and symbols.

For further guidelines, see the online document Choosing a Good Password.

It's also important to record the password in a safe place—and not anywhere that's easily accessible to someone else. If you forget this password, you can't restore the backup of your certificate.

 


Delete Your Certificates

Before deleting one of your own expired certificates from the Your Certificates tab in the Certificate Manager, make sure you won't need it again some day for reading old email messages that you may have encrypted with the corresponding private key.

 


Other People's Certificates

The Other People's tab in the Certificate Manager displays email certificates you have on file that identify other people.

When people send you digitally signed email messages, Certificate Manager imports their certificates automatically. You can use these certificates to send encrypted messages to those people.

Other people's certificates are listed under the names of the organizations that issued them:

To perform the following actions, select the certificates on which you want to act and click one of these buttons:

 


Edit Email Certificate Trust Settings

When you select someone else's certificate from the Other People's tab in the Certificate Manager and click Edit, you see a dialog box titled "Edit email certificate trust settings."

Here you specify whether you want to trust the selected certificate to identify messages from and send encrypted messages to the email address shown.

The dialog box contains these elements:

Click OK to confirm your choice.

 


Delete Email Certificates

Before deleting someone else's certificate from the Other People's tab in the Certificate Manager, make sure you won't need it again some day to send encrypted email to that person or to verify digital signatures on messages from that person.

 


Web Site Certificates

The Web Sites tab in the Certificate Manager displays certificates you have on file that identify web sites.

Web site certificates are grouped under the names of the organizations that issued them:

To perform the following actions, select the certificates on which you want to act and click one of these buttons:

 


Edit Web Site Certificate Trust Settings

When you select a web site certificate from the Web Sites tab in the Certificate Manager and click Edit, you see a window entitled "Edit web site certificate trust settings." Here you specify whether you want to trust the selected certificate for identifying the web site and setting up an encrypted connection.

The dialog box contains these elements:

Click OK to confirm your choice.

 


Delete Web Site Certificates

Before deleting a web site certificate from the Web Sites tab in the Certificate Manager, make sure that you won't need it again for the purposes of identifying a web site and setting up an encrypted connection.

 


Authorities

The Authorities tab in the Certificate Manager displays the certificates you have on file that identify certificate authorities (CAs).

CA certificates are grouped under the names of the organizations that issued them:

To perform these actions, select the certificates on which you want to act and click one of these buttons:

 


Edit CA Certificate Trust Settings

When you select a CA certificate from the Authorities tab in the Certificate Manager and click Edit, you see a window entitled "Edit CA certificate trust settings." Here you specify the kinds of certificates you trust this CA to certify. If you deselect all the checkboxes, Certificate Manager will not trust any certificates issued by this CA.

The settings have these effects:

Click OK to confirm the settings you have selected.

 


Delete CA Certificates

Before deleting a CA certificate from the Authorities tab in the Certificate Manager, make sure that you won't need it again to validate certificates issued by that CA. If you delete the only valid certificate you have for a CA, Certificate Manager will no longer trust any certificates issued by that CA.

 


Device Manager

This section describes the options available in the Device Manager window. For background information and step-by-step instructions on the use of the Device Manager, see Manage Smart Cards and Other Security Devices.

If you are not currently viewing the Device Manager window, follow these steps:

  1. Open the Edit menu and choose Preferences.
  2. Under the Privacy & Security category, choose Certificates. (If no subcategories are visible, double-click the category to expand the list.)
  3. In the Certificates panel, click Manage Security Devices.

The Device Manager lists each available PKCS #11 module in boldface, and the security devices managed by each module below the module's name.

When you select a module or device, information about the selected item appears in the middle of the window, and some of the buttons on the right side of the window become available. In general, you perform an action on a module or device by selecting its name and clicking the appropriate button:


8 February 2002

Copyright © 1994-2002 Netscape Communications Corporation.