Digital certificates

Digital certificates are used by many services to secure the data that flows between systems. It you are accessing any of the services in the Physics Department that can be secured in this way then you will want to download and install a certificate. Unless you have the correct and uptodate certificates installed you may receive warning messages and/or delays every time you try to connect to one of these services. Secure services include:

  • Secure web servers (web addresses starting https: rather than http:).
  • Secure IMAP (for email clients to receive email via encrypted communication).
  • Secure SMTP (for email clients to send email via encrypted communication).

Physics Department and Eduroam Certificates

Most of the centrally managed services have certificates that are signed by trusted 'root' certificate authorities. Between the trusted CAs and our certificates are intermediate certificates that form the "certificate chain".

To install the Physics certificate chain, download the zip file from the following link. On a Windows system, open the zip file using WinZip, PowerArchiver or some similar application and extract the certificate files. Install the certificate chain by right clicking on the extracted file and selecting 'Install certificate'. On other platforms, certificates are usually installed by using a web browser and looking for the appropriate section within its 'options', 'settings' or 'preferences'. For Linux, use the relevant field in the VPN or Wifi settings entry.

Download certificate chain for physics.ox.ac.uk (zip file containing the certificate chain).

There is a similar certificate chain for Eduroam, that can be found to the right of this page. However, this is not being provided to us in future. You should use the JISC/Eduroam Configuration Assistance Tool or (on mobile devices) Get Eduroam instead.

Categories: Security | Web