Email Encryption - Exporting InCommon Email Certificate

If you have saved a previously exported certificate to OneDrive, you can download it with the following steps.

1. Go to https://onedrive.ku.edu to access your KU-connected OneDrive account.
    
2. Locate the saved InCommon certificate. The file should be saved in either the pfx format (if exported from Windows) or the p12 format (if exported from macOS).
    
3. Click the three dots next to the file name.
    
4. Select Download.
   

1. Open the Keychain Access app. The easiest way to locate the application is to open the spotlight search (\xe2\x8c\x98 + Space) and type "Keychain Access".
   
    
2. When prompted select Open Keychain Access.
   
    
3. Select Certificates from the top menu.
    
4. Locate your InCommon certificate. It will have your name, followed by "(InCommon)".
   
    
5. Right click (or hold down the "Ctrl" key while clicking) and select the export option. It will read Export, followed by the name of the certificate.
   
    
6. Select a location and enter a file name for your certificate, then click Save. OneDrive is recommended by KU IT, as it ensures you don't lose your certificate in the event of a hard drive or computer failure.
   
   
   
    
7. Fill in a password for your certificate. You will need to use this password when installing your certificate on other devices.
   
    
8. Enter your keychain password and click Allow. The keychain password is usually the same password that you use to access your computer unless you explicitly set it to something different.
   

Once exported, you can view the certificate file in your saved location using the Finder application. The certificate can be installed on other devices by following the instructions in related article Email Encryption beginning at Step 2.

1. Open your Start menu and type "Control Panel." You can start to type once the Start menu is open without clicking anything.
    
2. Select the Control Panel app.
    
3. Open Internet Options. Search "Internet" using the search box in the upper right if you are unable to find the option. This will open a new window with the title "Internet Properties".
   
    
4. Click the Content tab.
    
5. Select Certificates.
   
    
6. Choose your InCommon certificate, located under the Personal tab. You'll see your name in the "Issued To" column, and your primary email address in the "Friendly Name" column.
    
7. Click Export.
   
    
8. Click Next when the Certificate Export Wizard opens.
   
    
9. Choose Yes, export the private key when prompted, then click Next.
   
    
10. Check that the file format is set to Personal Information Exchange. Choose Include all certifications in the certification path if possible, Export all extended properties, and Enable certificate privacy. Do not select "Delete the private key if the export is successful."
    
     
11. Select Password and create a password for your certificate. You will need to use this password when installing your certificate on other devices.
    
     
12. Click Browse and choose the file name and location for your certificate file. OneDrive is recommended by KU IT, as it ensures you do not lose your certificate in the event of a hard drive or computer failure.
    
     
13. Confirm the settings are correct and click Finish.
    
     

Once exported, you'll get a confirmation alert from Windows. The file will be saved in your location of choice, which you can confirm by opening the folder in File Explorer.

 

The certificate file can be installed on other devices by following the instructions in related article Email Encryption starting from the "Step 2: Installing Email Encryption Certificate" panel.