DigiCert KnowledgeBase - Technical Support-hero

Knowledge Base

Certificate Installation Methods | Gatekeeper

Solution ID : TL11
Last Modified : 01/11/2024

Depending on your choice of browser, the following options for installing your certificate are available:

 

PKCS#12 file download (P12)

This doesn’t require any software installation. It will download your new certificate to a file that you must then open to complete installation.

Click here for detailed instructions

 

DigiCert Desktop Client (DDC)

This requires the download and installation of the DDC software, which then runs in the background and can be accessed via an icon in the system tray.

Click here for detailed instructions for Chromium based browsers
Click here for detailed instructions for Firefox browser

 

Legacy Internet Explorer (IE)

This uses an ActiveX component to install your certificate to the Windows certificate store.

This method is used automatically whenever you use Internet Explorer (or Edge in IE Mode) to complete installation. You won’t be given a choice of other methods.

 

Certificate Signing Request (CSR)

This is only suitable for advanced users who use software or a hardware device to generate a CSR. The CSR (PEM format) is manually submitted to DigiCert during the installation process and a downloadable certificate (PEM and DER formats) is produced. 

 

Certificate methods in comparison

Support P12 (default) DDC Legacy IE Mode CSR
Operating Systems

All Operating Systems

Windows & MAC OSX

Windows Only

All Operating Systems

Most Modern Browsers

Chromium-based & Firefox

Chromium-based & Firefox

Internet Explorer 11 and Microsoft Edge in IE Mode only

Chromium-based & Firefox

USB Token

No support for direct installation to a USB token.
It’s always possible to use your token software to import the certificate file afterward

SafeNet Aladdin eTokens
(not other USB tokens)

Most USB tokens for which you have the drivers installed

No support for direct installation to a USB token. It’s always possible to use your token software to import the certificate file afterward

Additional information Natively supported by all modern browsers This method requires the installation of client software (DigiCert Desktop Client)   CSRs produced using 2048-bit RSA keys. Other key sizes and algorithms are not accepted.