Manual installation of the GLOBALTRUST root certificates

13. April 2023
Secardeo and GLOBALTRUST provide mutual customers with a fully automated, publicly trusted certificate management

In all cases where a web browser or another program does not recognize our root certificates, there are several installation options:

1) Install all GLOBALTRUST root and intermediate certificates

Download the file https://www.globaltrust.eu/static/all-stamm-cert.p7b and then install the certificates according to your application.

For Microsoft users: Save the file on the desktop or in any directory. Run “right mouse button” → “Install Certificate”. You get to the “Certificate Import Wizard” → Next → Select certificate store automatically → Finish

Precise installation instructions as PDF:

https://www.globaltrust.eu/static/support-microsoft-installation-certificate.pdf

2) Accepting a single server certificate in a browser

The user accepts the single server certificate unknown to his browser by skipping his browser’s misleading warning and accepting the offered certificate, if issued by GLOBALTRUST/A-CERT.

3) Permanent installation of the GLOBALTRUST root certificate

In this case, add GLOBALTRUST to the browser’s list of valid Root Certificate Authorities (RootCAs).

You can go to https://www.globaltrust.eu/static/globaltrust-2020.crt, then go to “open” → install certificate → “select certificate store automatically” → next → finish

Alternatively, the PKCS #7 format https://www.globaltrust.eu/static/globaltrust-2020.p7b is also available for installation. You will also get into your web browser’s certificate installer for valid certification service providers. To do this, go to “Open” → Select certificates → Double-click on the displayed certificate → Select “Install certificate” → “Select certificate store automatically” → Next → Finish – you will be asked whether you trust the certificate. Confirm the question with “yes”.

Download addresses for important root CA certificates:

Please note our Certificate Policy!

Information on the use of the certificate, liability of the issuer and user can be found at https://www.globaltrust.eu/certificate-policy.html.

Troubleshooting the certificate installation

In some cases, the specified certificates (*.crt and *.p7b) cannot be installed. Instead, messages like “invalid certificate file” appear, only text or binary data is displayed.

In almost all cases, the reason is faulty or incorrect file type management by the user. On the one hand, the Microsoft operating systems use the MIME type information provided in the files, on the other hand, they also interpret the file extensions.

If the certificate installation does not work, then check whether the file extensions .cer, .crt and .p7b are assigned to the correct types:
Open “My Computer” → Tools → Folder Options → File Types
.cer and .crt must be of file type “Security Certificate” (if not, use “Restore” to restore this file type), .p7b must be of file type “PKCS #7 Certificates”.

Users of other operating systems / browsers

You can find out how to install the GLOBALTRUST root certificate on Apple’s iPhone in the article: Installation and use of GLOBALTRUST certificates on iOS

(https://fruit.globaltrust.eu/installation-and-use-of-globaltrust-certificate …/)

Users of other operating systems / web browsers should follow the relevant operating instructions when installing the root certificates. In all cases, however, the certificate files and the fingerprint are identical. If you have any questions about the installation, our support team will be happy to help.

You might be interested in that

What are the costs of not going paperless?

What are the costs of not going paperless?

While digitization reached almost every aspect of daily work, the necessity for handwritten signatures in B2B environments preserves printing paper its crucial role – and incurs costs. However, by implementing e-signatures, businesses can reduce expenses, streamline processes, and contribute to a more sustainable...

read more
Sign and encrypt emails using an Apple iPhone

Sign and encrypt emails using an Apple iPhone

User guide for signing and encrypting emails with the GLOBALTRUST CLIENT certificate on your Apple iPhoneAs of May 10, 2023 1 Basic 1.1 Goals of this document A step-by-step guide on how to add the certificate to your iPhone to then sign and/or encrypt emails. This guide was created for an Apple iPhone (iOS version:...

read more