System certificates

Email certificates

Email certificates are certificates associated with an email address that are silently distributed to all Redtrust customers. If the client uses Outlook 2007 or 2010, these certificates are automatically added to the contact list.

To add a new email certificate, click Upload and choose a certificate (cer, crt or pem). Hover over a certificate's row to see the available options:

• Delete: Deletes the Redtrust certificate.
• Download .cer (X509): Downloads the certificate as a cer file.
• Download .pub (SSH): Downloads the public key of the certificate as a pub file.

To see the details of a certificate, double-click its row. Note that email certificates can't be edited. To learn how to use these certificates to sign emails in Outlook, see Sign emails with a certificate.

CA certificates

CA certificates don't include a private key and are installed in each machine's local registry as trusted root entities. On login, the agent compares a hash of its current certificates against the server's. If they differ, the agent downloads the new certificates automatically. There is no immediate push mechanism — changes take effect on the agent's next login.

To update or renew a CA certificate, see How to update a CA certificate.

warning

Deleting a certificate doesn't remove it from agents that already have it installed. The certificate stops being distributed from that point on, but is not removed from machines where it was already installed.

To add a new CA certificate, click Upload and choose a certificate (der, cer, crt or pem). Hover over a certificate's row to see the available options:

• Delete Certificate: Deletes the certificate.
• Download .cer (X509): Downloads the certificate as a cer file.
• Download .pub (SSH): Downloads the public key of the certificate as a pub file.

Double-click a certificate's row to see its configuration and attributes.

Local CA certificates

Local CA certificates don't include a private key and are used on the Redtrust server. Unlike CA certificates, local CA certificates are not distributed to agents — they only affect the Redtrust server itself. They can be installed or uninstalled; once installed, the system recognises them as CA entities.

To add a new local CA certificate, click Upload and select a certificate file (der, cer, crt or pem). Hover over a certificate's row to see the available options:

• Delete Certificate: Deletes the certificate.
• Download .cer (X509): Downloads the certificate as a cer file.
• Download .pub (SSH): Downloads the public key of the certificate as a pub file.
• Install / Uninstall: Installs or uninstalls the certificate on the Redtrust server. The status is displayed in the list.

Double-click a certificate's row to see its configuration and attributes.