LSUMail: Install a Personal Certificate from InCommon in Mozilla Thunderbird

**PLEASE NOTE:  This article assumes you have already enrolled for and downloaded your certificate:  If this is not the case, please read the article "LSUMail: Obtain a Personal Certificate from InCommon" FIRST.**

**PLEASE NOTE: Web-based e-mail clients, such as Outlook Web Access(OWA) or GMAIL *do not* support S/MIME.  Please use a non web-based e-mail client, such as Microsoft Outlook or Mozilla Thunderbird, to send and receive signed or encrypted e-mails.**

To Install an InCommon Certificate in Thunderbird:

1.  Open Mozilla Thunderbird and go to the Tools menu at the top of the window ("Edit" menu in Linux) then Account Settings.  

Tools menu with Account Settings option highlighted at the top of the screen in Thunderbird

2. In Account Settings, first click Security on the left sidebar then click View Certificates at the bottom center.

Account Settings; Security | View Certificates highlighted on the bottom of the window

3. In Certificate Manager, first click Your Certificates tab at the top left, then click Import in the bottom middle of the window.

the Your Certificates tab with Import highlighted at the bottom of the window.

4. Browse to the certificate you downloaded from InCommon Cert Manager.  Enter the PIN created during the InCommon certificate enrollment process.  Click OK.

Password Entry Dialog with OK button at the bottom of the window.

5. Verify that you have imported the correct InCommon Client Certificate.  It should show "Internet2".  Click OK at the bottom right corner of the window.

Certificate Manager window with Internet2 highlighted and OK button at the bottom right

6. In Account Settings, click the Security tab from the left sidebar, then click "Select..." near the top right in the Digital Signing section.

Account Settings, Security section: Select highlighted

7. Select the certificate that was just imported.  Verify that the certificate was issued by "InCommon Standard Assurance Client CA".  Click OK at the bottom of the window.

Select Certificate; Issued by: highlighted

8. A dialog box should appear.  Click Yes to use the same certificate for encryption.

screesnshot of Thunderbird message; Yes highlighted.

9. In Account Settings, click the check box next to Digitally sign messages (by default) in the middle of the screen.  Click OK at the bottom right of the window.

Account Settings; Security | Digitally sign messages (by default) highlighted

10.  When creating new messages, you should now see a security button at the top and icons at the bottom right that shows if a message is Signed and / or Encrypted.

New message window


Referenced from: Comodo

5/27/2020 1:43:48 PM