Firefox uses it's own Certificate Manager. So even if your Windows (and other Microsoft) applications already use some HNG Root Certificate Authority Firefox still might not. The following procedure tells you how to import the HNG Root and Class3 Root Certificate Authorities into your Firefox web browser.

1. Click the Root Certificate Authority link

2. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

   

3. Close the Certificate Viewer and tick at least the first box ('Trust this CA to identify web sites.').

   

4. Press Ok

Do the same for the Class3 Root Certificate Authority

1. Click the Class3 Root Certificate Authority link

2. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

   

3. Close the Certificate Viewer and tick at least the first box ('Trust this CA to identify web sites.').

   

4. Press Ok and you're finished.

Opera uses it's own Certificate Manager. So even if your Windows (and other Microsoft) applications already use some HNG Root Certificate Authority Opera still might not. The following procedure tells you how to imp$

1. Click the Root Certificate Authority link

2. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

   Fingerprint(MD5) 03 97 EF DD E3 50 F4 43 8E 7F 1C 92 FE E1 BC FB
   Fingerprint(SHA-1) 12 43 CD 15 7A 75 4D 72 9B 6B C9 65 65 8D 0B 1A 84 7D 73 29

3. Make shure 'Allow connections to sites using this certificate' is checked.

4. Uncheck 'Warn me before using this certificate'

5. Press Ok

Do the same for the Class3 Root Certificate Authority

1. Click the Class3 Root Certificate Authority link

2. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

   Fingerprint(MD5) 04 80 6A F8 9C 93 08 2C CB 3F C5 E0 07 49 8C 7C
   Fingerprint(SHA-1) 8F 3B 28 5C CE EB A3 B0 60 B5 6E D5 EA 04 69 F1 A3 2D CC 65

3. Make shure 'Allow connections to sites using this certificate' is checked.

4. Uncheck 'Warn me before using this certificate'

5. Press Ok and you're finished.

Thunderbird uses it's own Certificate Manager. So even if your Windows (and other Microsoft) applications already use some HNG Root Certificate Authority Thunderbird still might not. The following procedure tells you how to import the HNG Root and Class3 Root Certificate Authorities into your Thunderbird mail client.

1. Right-click the Root Certificate Authority link and save it to a convenient location using 'Save As'.

2. Do the same for the Class3 Root Certificate Authority link

3. Open Thunderbird

4. Depending on the version of Thunderbird

   1. For older versions of Thunderbird open: Preferences->Privacy->Security->View Certificates->CA
   2. For Thunderbird V2.X open: Tools->Options->Encryption->View Certificates->Authorities

5. Click "Import Certificate" and select the 'hng-ca.crt' file

6. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

   

7. Close the Certificate Viewer and tick at least the second box ('Trust this CA to identify email users.').

   

8. Press Ok.

9. Click "Import Certificate" again and select the 'hng-class3.crt' file

10. Then in the dialog box click VIEW check the SHA1 Fingerprint and MD5 Fingerprint they should match the following:

    

11. Close the Certificate Viewer and tick at least the second box ('Trust this CA to identify email users.').

    

12. Press Ok and you're finished.

This was tested on Mac OS X Leopard so your results may vary.

To add the HNG Root and Class3 Root Certificate Authorities to the system, we need to use the Keychain Access application which is shipped with Mac OS X.

To install the certificates system-wide, you need to follow these steps:

1. Click the Root Certificate Authority and Class3 Root Certificate Authority link. They will be downloaded to your desktop or your download folder.

2. Double click on the 'hng-ca.crt' file. The Keychain Access application will be launched

3. To check the certificate, click on the 'View Certificates' button on the left side of the dialog and expand the 'Details' tab. A dialog with information about the certificate will pop up. Make sure the following values match:

   

4. Select 'System' or 'X509Anchors' from the 'Keychain' dropdownlist and press 'OK'.

5. You will be asked to authenticate yourself.

6. Go back to your download folder and double-click on the 'hng-class3.crt'

7. To check the certificate, click on the 'View Certificates' button on the left side of the dialog and expand the 'Details' tab. A dialog with information about the certificate will pop up. Make sure the following values match:

   

8. Select 'System' or 'X509Anchors' from the 'Keychain' dropdownlist and press 'OK'.

9. You're finished.

This was tested in Windows XP so your results may vary.

To install HNG Root and Class3 Root Certificate Authorities in Windows follow these steps:

1. Click the Root Certificate Authority link

2. Then in the download dialog box click 'Open'.

3. Click 'Install Certificate'.

4. Click 'Next'.

5. Select 'Place all certificates in the following store'.

6. Click 'Browse' and select 'Trusted Root Certification Authorities'.

7. Click 'Next' and then 'Finish'.

8. You should get a 'Security Warning' check the Thumbprint(sha1) with the following:

   Thumbprint(sha1) 1243CD15 7A754D72 9B6BC965 658D0B1A 847D7329

9. If they match click 'Yes'.

10. Press Ok

Do the same for the Class3 Root Certificate Authority

1. Click the Class3 Root Certificate Authority link

2. Then in the download dialog box click 'Open'.

3. Click 'Install Certificate'.

4. Click 'Next'.

5. Select 'Place all certificates in the following store'.

6. Click 'Browse' and select 'Trusted Root Certification Authorities'.

7. Click 'Next' and then 'Finish'.

8. You should get a 'Security Warning' check the Thumbprint(sha1) with the following:

   Thumbprint(sha1) 8F3B285C CEEBA3B0 60B56ED5 EA0469F1 A32DCC65

9. If they match click 'Yes'.

10. Press Ok and you're finished.