Download and Install Guide for Qualified Certificate for Electronic Seals for PSD2

Feb 15, 2024

Download and Install Guide for Qualified Certificate for Electronic Seals for PSD2

Introduction

This guide outlines the install process for generating and storing keys in the Microsoft Certificate store as well as for HSM deployments.
Note: If you elected to provide an externally generated CSR for an HSM deployment, please skip to the second set of instructions.

Download and Install – (Default Method in the Microsoft Certificate store)

1. In Internet Explorer, click on the pickup link contained in the Certificate Download email.


2. Enter the Temporary Pickup Password that was created at the time of ordering, as shown in the diagram below.
    


3. Tick the Yes, make this Certificate exportable box, then select the Cryptographic Service Provider (CSP) for generating the private keys. The default provider is Microsoft Enhanced Cryptographic Provide 1.0. Also, tick the I Agree to the Subscriber Agreement box, and click Next to proceed.
    ​​​​


4. Click the Install My Certificate button. This will download the file to your computer.
    


5. The Certificate will then be installed in your Personal Certificate Store, which is viewable within Microsoft Management Console.
   

Download and Install – HSM Deployments

 
Note: For HSM Deployments, you need to select “Yes – I have an externally Generated CSR” at the time of ordering.
 ​​​​​​​

1. In Internet Explorer, click on the pickup link contained in the Certificate Download email.


2. Enter the Temporary Pickup Password that was created at the time of ordering, as shown in the diagram below.​​​​​​​


3. Enter the CSR in the Enter CSR Required box. Then, tick the I Agree to the Subscriber Agreement and click Next to proceed. ​​​​​​​​​​​​​​


4. To download the Certificate, click the Download Certificate button. This will download the file to your computer. After which, you need to import the Certificate into your HSM. Note: These Certificates will match the private key used to generate the CSR submitted during the install process, for information on how to import these Certificates on your HSM, please consult your HSM vendor's instructions. 


5. You are now ready to use your Certificate.