---
type: concept
title: E-Mail Certificates
tags: [pki, smime, security]
related: [nutzerzertifikate, harica]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_nutzerzertifikat_e_ma.md"]
---
# E-Mail Certificates

**E-Mail Certificates** are a specific type of [[nutzerzertifikate]] used primarily for creating digital signatures for emails (S/MIME), ensuring the authenticity and integrity of the communication.

## Provisioning Process
At the Universität Greifswald, these certificates are obtained through the [[harica]] system following these steps:
1. **Login**: Access the HARICA system.
2. **Selection**: Navigate to **Email** and select the **Email-only** type (other options are not supported).
3. **Verification**: Confirm the email address via a confirmation link sent by HARICA.
4. **Enrollment**: Generate the certificate using the following technical parameters:
    - **Algorithm**: RSA
    - **Key size**: 4096
5. **Export**: Download the resulting certificate as a **p12-Zertifikatsdatei** (`.p12`).

## Security Considerations
The current provisioning method involves **Private Key Server-Side Storage**. The private (secret) key is created and stored on a HARICA server rather than being generated locally on the user's device. 

The [[universitatsrechenzentrum-urz]] has flagged this as a security concern and intends to provide an alternative method via the university's account management system in the future.