Notice

For a longer transition period, we (WWU IT + WWUCA + DFN-PKI) offer worldwide recognized digital IDs (certificates) from two different providers.

  • The already longer offered digital IDs with “Global” certificates are based on the “T-TeleSec GlobalRoot Class 2” root certificate from T-Systems Enterprise Services GmbH.
    This offer is expected to expire at the end of 2022 for server certificates and at the end of 2023 for other certificates.

  • The now also offered digital IDs with “TCS” certificates from the Trusted Certificate Service (TCS) of the pan-European research network GÉANT are based on the root certificates of Sectigo.

The digital IDs „TCS“ have three advantages: For many users, no new ID checks are necessary, there is no paperwork, and digital IDs from servers can be automatically renewed via ACME.

Request for a personal certificate

As a member of an institution supplied by the WWUCA you may request a personal certificate

This can be used for electronic signing and encrypting emails with S/MIME, but also to identify oneself to WWW applications, to computers, to other access control systems, and much more.

There are different methods for creating a key pair and for submitting the certification request to the WWUCA:

  • Using the WWU IT portal as described here. This way you will immediately receive your digital ID with “TCS” certificate.

    (This applies only to persons whose identity was once sufficiently well controlled. This is the case for most university employees. The others can identify themselves to a participant service staff member beforehand.)

    With this method, your key pair is generated by the IT portal but not kept.

    This is the recommended method.

  • Using the WWU IT portal as described here. This way you will receive your digital ID with “Global” certificate after another ID check.

    With this method, your key pair is generated and stored by the WWU IT portal. You can even download your digital ID later again and again.

  • With the WWW browser as described here for Firefox, Chrome, Edge, Internet Explorer, and Safari. This way you will receive your digital ID with “Global” certificate after another ID check.

    With this method, your key pair is generated by your WWW browser and kept in a JSON file on your computer.

  • Manually with OpenSSL or other software. This option works in the same way as requesting a “Global” server certificate, except that you select “User” as the certificate profile.