Importing Certificates Using Microsoft Windows

You can download PKI certificates from the CA onto the smart card using an internet browser or the Microsoft Management Console (MMC).

Download a PKI Certificate Using a Supported Web Browser

When creating the certificate request, make sure that the Microsoft Base Smart Card Crypto Provider is selected as the CSP.

You will then be prompted for your PIN code to sign the certificate request, and asked to install the certificate on your smart card.

Download a PKI Certificate With MMC

  1. Open the management console by typing mmc in the Start > Run menu.
  2. Add the Certificates snap-in from the File > Add/Remove Snap-in menu.
  3. Right-click on the Certificates node; go to All Tasks, and then select Request New Certificate.
  4. Click Next.
  5. Verify that the correct Enrollment Policy is configured and click Next.
  6. Expand the Details view to display the template settings.
  7. If you need to edit the template settings, click Properties, and then select the Private Key tab.
  8. Make sure that the Microsoft Base Smart Card Crypto Provider is selected as the CSP and that the Key size is set to 2048.
  9. Click Apply and then OK.
  10. Click Enroll.
    You might be prompted to enter your PIN code.
  11. Enter the PIN code and click OK.

The new certificate and the corresponding key are stored on your smart card.