---
type: concept
title: Nutzerzertifikate
tags: [pki, authentication, security, identity]
related: [dfn-pki-zertifikate, universitatsrechenzentrum-urz, email-zertifikate, harica, smime, outlook-certificate-import, thunderbird-certificate-import, unihgw-ca]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_nutzerzertifikat.md", "output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_nutzerzertifikat_e_ma.md", "output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_nutzerzertifikat_zert.md", "output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_nutzerzertifikat--txjmjd", "output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_unihgw_ca.md"]
---

# Nutzerzertifikate (User Certificates)

**Nutzerzertifikate** (User Certificates) are individual digital certificates issued to users and members of the Universität Greifswald. They are used to verify identity, secure communications, and provide secure authentication.

## Types and Primary Uses

The university distinguishes between different types of user certificates based on their intended use, issuer, and application procedures:

### E-Mail and General Use
*   **Purpose**: Specifically designed to secure email traffic via encryption and signing.
*   **Protocol**: Used for S/MIME email signatures via the [[smime]] protocol, ensuring the authenticity of the sender and the confidentiality of the message content.
*   **Issuance**: Typically issued via [[dfn-pki-zertifikate]] to ensure compatibility with external email clients.
*   **Further Information**: Detailed provisioning is covered in [[email-zertifikate]].

### Internal University Applications
*   **Purpose**: Used for authentication and authorization when accessing specific internal university software and services.

### VPN Access
*   **Migration**: The [[universitatsrechenzentrum-urz]] is migrating user certificates used for VPN access to the internal [[unihgw-ca]].

## Implementation in Email Clients

To use these certificates, they must be imported into the user's chosen email client. The [[universitatsrechenzentrum-urz]] provides specific documentation for:
- [[mozilla-thunderbird]]
- Microsoft Outlook (see [[outlook-certificate-import]])
- The [[groupware]] Webmailer

## Technical Framework and Administration

### Management
These certificates are generally managed through the [[harica]] provider as part of the [[dfn-pki-zertifikate]] framework. The overall issuance and support of these certificates are managed by the [[universitatsrechenzentrum-urz]].

### Support
Users encountering issues or requiring technical assistance for deployment and configuration are directed to:
- The [[groupware]] ticket system.
- The URZ hotline / Campus-IT hotline (ext. 1420).