Anleitung
  1.  Login tohttps://pki-frontend.ethz.ch
  2. If you get a login window set a d\ before your username.
  3. Press "Request Certificate".

  4. There are three profiles to choose from. The names are completed by the support group.

    • ETH WebServer:
      internally trusted towards the ETH Root Certification Authority. ETH Root certificate and ETH Issuing certificate must be installed on the systems involved (Download Root certificates and intermediate certificates). No restriction of number of addresses. Can be issued for one, two or three years. Browsers accept only certificates valid for one year, but for web service between two servers longer validity can be used.

    • DC WebServer:
      Publicly trusted to the DigiCert Root Certification Authority. Validity one year. Number of addresses unlimited.When billing, one certificate is charged for every six addresses.


  5. Upload the CSR via "Choose File".

  6. Select the validity of the ETH WebServer.

  7. Insert a valid mail address at "Recipient Email".

  8. Press the "Request" button.

  9. After a few seconds, the certificate will be ready for download.

  10. At "Show Delivery Formats ..." the format for downloading can be selected and whether the root and Intermediate certificate is included or not.

  11. If the certificate is needed again later, it can be downloaded again at any time.