2020
(1) Downloading, Installation and Backup of
Digital Certificates with User Generated
Password Using Mozilla Firefox
PNPKI
Contents
Assumption ................................................................................................................................. 2
Prerequisite ................................................................................................................................. 2
Setting up your Mozilla Firefox browser ..................................................................................... 2
Downloading the PNPKI Root CA Certificates ......................................................................... 2
Installing the PNPKI Root CA Certificates ................................................................................ 2
Downloading and Installation of your Digital Certificates .......................................................... 6
Login to Self-Service Portal (SSP) and Password Change ........................................................ 6
Checking Certificate Details and Requesting for your Certificate ........................................... 7
Certificate Download ............................................................................................................ 10
Creating Backup Copies of your Certificates ......................................................................... 11
Downloading, Installation and Backup of Digital Certificates v.2 Page |1
Downloading Authentication Certificate with User
Generated Password Using Mozilla Firefox
Assumption
This document assumes that the compatible versions of Mozilla Firefox are installed on the
computer. The ONLY version we can use is the ESR (Extended Support Release) version or Firefox
version 68 and below.
Prerequisite
The user must have an Internet connection.
Setting up your Mozilla Firefox browser
Before we proceed, you must first install the PNPKI certificate chain of trust into the Mozilla Firefox
browser.
Downloading the PNPKI Root CA Certificates
1. Download the PNPKI certificate chain PEM files here:
https://dict.gov.ph/certificate-authority-ca-certificates/
2. Unzip the files in a folder on your computer
Installing the PNPKI Root CA Certificates
3. Launch your Mozilla Firefox browser. Click on the Open Menu at the top right corner.
Downloading, Installation and Backup of Digital Certificates v.2 Page |2
4. Select Options
5. A new Options window will open. Select Privacy & Security
6. Scroll down to the bottom of the page, under the section for Security, look for the View
Certificates button and click on it.
Downloading, Installation and Backup of Digital Certificates v.2 Page |3
7. The Certificates Manager window will open. Go to the Authorities tab then click on
Import
8. Point it to the folder where you have unzipped the downloaded PEM files. Select one
of the five files then click on Open
9. The Downloading Certificate window will open. Put a check on both Trust this CA to
identify websites and Trust this CA to email users then click on OK
Downloading, Installation and Backup of Digital Certificates v.2 Page |4
10. Back at the Certificate Manager window, if you scroll down the list, you should now
see a section for DOST and the first PEM file you chose to install.
11. Just repeat the process until you have all five (5) PEM files installed.
12. Click OK to close out the Certificate Manager window
Now that you have finished setting up your Mozilla Firefox browser, you can start downloading your
certificate.
Downloading, Installation and Backup of Digital Certificates v.2 Page |5
Downloading and Installation of Digital Certificates
Login to Self-Service Portal (SSP) and Password Change
1. Access the self-service portal URL that your Registration Authority (RA) emailed to you. For the
purposes of demonstration, we will be using this URL:
https://govca.npki.gov.ph/SecureTMSSelfSrv/domain/MainAuth
Note: Logging in to the Self-Service Portal must be done using the compatible version of Mozilla
Firefox (version 68 or lower). Once you have accessed the appropriate URL, you should see the
image below. Enter the username and password provided in the email then click Login.
Warning:
Be careful when entering your username and password. After five (5) incorrect log in
attempts, your account will be locked.
2. After logging in successfully for the first time, you will be prompted to change your password.
Fill out all the fields and setup the security question and answer.
Downloading, Installation and Backup of Digital Certificates v.2 Page |6
3. Hit the Save button. If you encountered no errors, you should see Password Changed at the
top part just like in this image:
Checking Certificate Details and Requesting for Certificate
1. Click the Philippine National PKI logo on top of the page to get to the Home page.
You may be logged out of the self-service portal. Login again with your new password.
2. Click Enrollment on the left side of the home page.
Downloading, Installation and Backup of Digital Certificates v.2 Page |7
3. Select Certificate Enrollment form the dropdown list.
4. Check all details in your certificate. If you see any errors in your personal information, do not
proceed. Notify your RA immediately so they can correct them first.
Important details to check:
5. If your details are all correct, you can hit the Request Cert button at the lower right side of the
page.
Downloading, Installation and Backup of Digital Certificates v.2 Page |8
Important:
If you clicked the Request Cert button and decided to download your certificate at a later time,
make sure that you use the same browser and the same computer from where you requested
the certificate, otherwise you won’t be able to install your certificates.
6. The screen will display the generation of private key.
7. Click Certificate Request List to see the status of your certificate enrollment.
Downloading, Installation and Backup of Digital Certificates v.2 Page |9
8. A Pending status will appear, which means your certificate enrollment is not yet issued.
Notify your RA Officer once you see the Pending status.
The request certificate is subject for approval by the RA Officer.
Certificate Download
9. Once approved by the RA Officer, the status should now be changed to Issued.
10. Click Token Certificate List.
11. Click Install on the right side of the page.
Downloading, Installation and Backup of Digital Certificates v.2 P a g e | 10
12. A notification similar to the image below will pop up at the top of your browser, indicating that
you have successfully installed your certificate. Click OK.
Creating Backup Copies of your Certificates
13. Click this icon located at the topmost right corner of your browser and go to Options.
14. A new Options window will open. Select Privacy & Security
Downloading, Installation and Backup of Digital Certificates v.2 P a g e | 11
15. Scroll down to the bottom of the page, under the section for Security, look for the View
Certificates button and click on it.
16. On the Certificate Manager, select Your Certificates. You should be able to see your certificate
as show on the image below.
Downloading, Installation and Backup of Digital Certificates v.2 P a g e | 12
17. Select your certificate then click Backup.
18. Navigate to a secure directory where you will save your certificate. For purposes of
demonstration, we will store the certificate in the Documents folder. It is highly recommended,
however, that you store it in a secure location.
Note: Since you will be downloading two types of certificates, you may want to consider
indicating the type of certificate you have just downloaded on the filename.
Example:
Signing Certificate = Juandelacruz_Sign
Authentication Certificate = Juandelacruz_Auth
Downloading, Installation and Backup of Digital Certificates v.2 P a g e | 13
19. Set your password for the certificate backup then click OK.
Note: The password should be at least eight characters. Consider a password that is hard to
crack. It should contain at least a special character, a number, and capital and lower-case
letters.
20. A success message should appear after clicking OK on the password window. Click OK to
escape from the window.
21. To log out of the Self-Service portal, hover you mouse over your user name located at the
topmost right corner of the webpage. A Logout button should appear. Click it.
Now you just need to follow the same steps to download and backup your Signing Certificate.
Downloading, Installation and Backup of Digital Certificates v.2 P a g e | 14
