Configuring
Microsoft's Private Key Container
Overview
After you fill out the "Enrollement Form" for your digital
ID and submit it by selecting the 
button at the end of the form, Internet Explorer will automatically
generate a set of screens that you must complete in order to protect your
private key in a "Private Key Container".
If anyone other than you has
physical access to your personal computer, it is imperative that you configure
these screens as illustrated in the examples below.
-
If your private key is left
activated in your absence, then anyone with physical access to your computer
can
-
use your legal signature - you cannot repudiate
this signature,
-
gain access to your on-line resources, and
read ALL of your confidential documents
Configuring Your Private Key Container for High Security.
The following example screens ilustrate how you
-
set the security level to High for you "Key Container",
-
create an identifier for your "Key Container",
-
create a password for accessing your "Key Container", and
-
create and insert a public key into your "Key Container".
 |
When the screen illustrated on the left appears, click
-
Set Security Level
|
 |
When asked to "Choose a security level approprite for
this item contained in your Protected Storage", select
-
High
-
Next >
|
 |
The screen to the left prompts you to
-
create an identity for your private key, then
-
create a password for accessing your key.
-
Select Finish.
This is the password you MUST NOT FORGET! |
 |
The previous screeen configured your "Key Container", This
screen asks you for your password so that IE can create your key set and
put the private key in the container.
-
Enter you password.
-
The "Security level should already be set to high"!
-
If not, set it to high!
-
Select OK
|
Do NOT check the "Remember password" box in the
above screen! If you do, anyone can use your
digital ID if your computer is left unattended!
When you have completed the last screen, the following will occur automatically
-
your key set will be generated,
-
your private key will be securely stored in your "Private Key Container",
-
the public key will be sent to the U. T. Houston Certificate Authority
(CA) for approval.
Your public key will be certified once
-
you identity has been verified by a local registration administrator (LRA),
and
-
the LRA approves certification.
Upon certification of your public key,
-
you will receive e-mail notification that you key is certified.
-
a URL contained within the e-mail message will allow you to download your
certified public key into the SAME computer that you used to apply
for certification.
Proceed
With Request for Digital ID
|
