Digital Certificates at the University of Bamberg
The University of Bamberg's IT Service supports secure communication based on the X.509 standard by issuing digital certificates.
What are digital certificates used for, and what types are there?
Digital certificates are electronic proofs of authenticity issued by a certification authority (CA). They confirm the authenticity of individuals or objects. Authenticity and integrity can be verified using cryptographic methods.
The IT Service issues X.509 certificates that allow for the unique identification of users and computers.
Server certificates, for example, form the basis for encrypted communication between a user’s web browser and the relevant servers. Users can usually tell this is the case when the corresponding website is accessed via “https” instead of “http,” and when the browser displays a symbol indicating secure data transmission and allows the user to view the corresponding security certificate (see Figure 1).
In addition, certificates can be issued to users that are uniquely assigned to them. This allows content such as emails or documents to be digitally signed or encrypted. Signed data can then be verified for authenticity and integrity. This makes it possible to confirm beyond a doubt that the content originates from the person who signed it and has not been altered. Encryption also ensures that the data is readable only by specific authorized recipients.
Who can apply for and use certificates?
Certificates for signing emails, signing documents, and encrypting server communications may only be requested and used by full-time employees of the University of Bamberg and employees of the State Institute for Family Research at the University of Bamberg. This service is not available to students.
How do I obtain and install a digital certificate?
Collaboration Between the IT Service and the DFN Association
The IT Service participates in the DFN-PKI of the German Research Network Association (DFN) and obtains all certificates through this channel. The issued certificates come from a provider sourced by the DFN Association via GÉANT’s TCS service. The PKI-Portal is available for requesting and revoking certificates. The private key is generated locally in your browser. Server certificates can also be issued via ACME or CSR.