See this video in other languages

In order to be able to download and install your idCAT certificate (to be able to use it) you must follow the following steps.

The Registration Entity will have provided you with the paper delivery form and the sending of an email with the necessary information.

Step 0 – Download and install public keys

It is necessary to download key 1 and 2 , in order to verify that the certificates that arrive on our computer equipment have been issued by one of the certification authorities in the hierarchy of entities of the AOC Consortium.

Note : If you have an antivirus installed on your computer, it may not recognize the file type and display a security alert to confirm trust.

To download the two keys, use the following links:

1.- key of the certifying body of the AOC Consortium
2.- key of the citizen certification entity (download them by clicking here if your certificate was issued before April 9, 2015)

To install , follow the steps depending on your browser:

  • Internet Explorer and Google Chrome on Windows operating system

Note: These are the steps you must follow to download the keys, it is the same process and screens for both certificates.

Note: Once these files have been installed, if you use the Internet Explorer, Google Chrome or Edge browsers you can now use the idCAT certificate. See the note below for use cases with Firefox.

  • Mozilla Firefox on any operating system, Windows, Linux or MAC
    • Save the files to your hard drive.
    • Inside Firefox import the downloaded file by opening the options from the right side menu, Options > Advanced > Certificates > View certificates > Entities tab > Import > Select file.
  • Safari and Google Chrome with MAC operating system
    • Save the files to your hard drive.
    • Double-click the downloaded file, and accept the installation in the certificate store.
    • In order for the idCAT certificate to be listed as trusted, you must access MAC Keys - Certificates tab - double-click on the EC-ACC public key and click on the Get information menu and on this screen, in the Trust drop-down mark Always trust ( the password asked on completion is your MAC password):

mac-1.jpg

mac-2.jpg

Related Content:

idCAT public keys?

Step 1 – Download it on Windows or MAC

The deadline for downloading the idCAT is 90 days and 10 attempts from the date of issue. Once the deadline has expired, you will have to go to an idCAT Registration Entity and repeat the application process.

On the YouTube channel idCAT you have the video of the download and installation of the certificate: HERE

Access the idcat.cat/download website from a desktop or laptop computer, as the certificate cannot be downloaded from mobile devices (mobile phone or tablet).

Fill in the identification data, completing the fields:

  • Type of supporting document: choose the type (NIF, NIE, etc.)
  • Number: Enter as it appears in the document
  • Download code (password): enter the sequence you received in the email or on the delivery slip
  • Personal code: enter the code that you indicated to the idCAT Registration Entity and that only you know

Note: Sometimes the email manager may interpret this email as SPAM. Check this tray.

Once the data is filled in, click Search.

The website will display the certificate details and contact details. Once reviewed, click Download.

Then, the browser will ask you if you want to "Save" or "Open" the file. Click on "Save" the file that will be saved in the location defined for downloads in your browser (if instead of "Save" by mistake you selected "Open", depending on the browser used and its version, it is the certificate installation wizard may open. If it doesn't open, if you haven't closed or refreshed the app, you can try the download again).

In the case of using MAC and Safari, the browser will ask you if you want to allow or block the download of the file. Click "allow" to complete the download process. We recommend using Chrome to download.

Once done, you will see a message confirming that the download was successful:

If you want to download the certificate again, the tool gives you the option to do it again as long as you don't close or refresh the browser. If you close the browser, the certificate cannot be downloaded again.

If you do not know where it has been downloaded, you can consult the content Where is my idCAT Certificate?

Step 2 – Install it on Windows

To install the certificate, look for the file with the extension .p12 or pfx downloaded on your computer in the folder defined for downloads.

Double-click the file and then follow the steps in the wizard:

Leave the Current User option selected and click Next.

In this step, the assistant will ask you for the Download Code (password) that appears in the e-mail received or on the delivery slip.

Important:

Click Next at each step until you reach Finish

Once you click Finish, you will have the idCAT certificate installed in the Windows repository (Internet Explorer and Google Chrome):

  • With Internet Explorer : go to Tools > Internet Options > Content > Certificates > Personal
  • With Google Chrome : Go to Settings > Show advanced options > HTTPS/SSL > Manage certificates > Personal
  • Mozilla Firefox access Tools - Settings - Privacy and Security - Certificates - Show certificates - Your certificates

Note: We recommend that you keep the .p12 or pfx file as a backup. To reinstall it, remember that you have the download code on the delivery note or in the e-mail you received.

OPTIONAL: in case you want to protect the idCAT with a user password, follow the content of the FAQ: Measures to avoid improper use of the idCAT

Step 2 – Install it on MAC

To install the certificate, look for the file with the extension .p12 or pfx downloaded on your computer in the folder defined for downloads.

Double-click the file and select from the drop-down Keys: Login.

Press the Add button to install the certificate.

Note: You must bear in mind that the padlock icon in Keychains - Login must be open in order for the idCAT certificate to be installed correctly.

The system will ask you for two passwords: the system administrator first and the download code (password) afterwards.

Once done, you will have the idCAT certificate installed in the MAC repository (Safari and Google Chrome):

  • With Safari : Open the Finder menu and type the word Keyboards, this will open the Keyboards folder on your computer. In the My certificates subsection you can check if the certificate appears.
  • With Google Chrome : Go to Settings > Show advanced options > HTTPS/SSL > Manage certificates > Personal

For Mozilla Firefox you need to import the .p12 or .pfx file into the browser itself. To do this, go to Tools - Settings - Privacy and Security - Certificates - Show certificates - Your certificates - and click Import - a wizard will open to perform the installation.

Note: We recommend that you keep the .p12 file as a backup. To re-install the file remember that you have the download code on the delivery sheet or in the e-mail received.

For the idCAT to be detected as trustworthy on your MAC, access the Keys folder - Certificates tab - EC-ACC--> press Get information and once here, by expanding the Trust menu, indicate Always trust it.

NOTE: When doing this action the system will ask you for your MAC credentials.

Once these steps have been taken, if you go to Keychains - my Certificates tab--> your name (idCAT) you will see that it already appears as trusted.

Note: The following screenshots were taken with the MAC OS Mojave version and some options may differ from other versions.

Step 3 (optional) - Export to a phone or tablet

The idCAT cannot be downloaded from mobile devices such as phones or tablets, but you can make a copy ( here you will find how to do it) and install it where needed. Consult the manuals for iPhone/iPad , Android , Windows Mobile .

Related Content:

Check the functioning of the idCAT