EXPORT / BACKUP DIGITAL CERTIFICATES AND CONFIGURE THE CSI
Now that you have received the two emails from VeriSign, you must export and backup both your signing and encryption certificates.
These steps are fully explained with printable guides and video tutorials on the CSI installer CD, or printable guides on the Cargo Support Website.
HOW DO I BACK UP MY DIGITAL CERTIFICATES?
After downloading your certificates you must immediately export and then backup both certificates.
You will need to export the:
* private keys of your signing/authentication certificate
* private key of your encryption certificate
* public key of your signing authentication certificate
* public key of your encryption certificate
When exporting a private key, Windows will ask you for a password. You must use a password with at least eight characters that includes at least one capital letter and one number. If you used this recommended format in the previous step, you will be able to re-use it now and in later steps. This will minimise the number of passwords you need to remember.
Save your certificates!
When you have exported your certificates you will have four files burnt to CD / DVD or external drive.
Do not use floppy disks. The file suffixes will be suppressed if you are using Windows XP, but they should use the following naming convention:
* Yourname_sign_priv.pfx (this file is added to the CSI Store)
* Yourname_encrypt_priv.pfx
* Yourname_sign_pub.cer (this file is given to your organisation's CTA Signatory or administrator to allow them to add you as a new user.)
* Yourname_encrypt_pub.cer
HOW DO I ADD MY CERTIFICATES TO THE CSI STORE?
Add the file Yourname_sign_priv.pfx to the CSI Store using the CSI Management Utility. The CSI can also access certificates held in Internet Explorer (The Windows CAPI store). Customs has found however, that certificates stored in this way can become spontaneously corrupted. For this reason Customs will not provide support for certificates being accessed from the Windows CAPI store.
CAN I SET A DEFAULT CERTIFICATE USING THE CSI MANAGEMENT UTILITY?
A full walkthrough of this is available on the CSI installer.
Note: Before you call Customs for assistance with problems relating to digital certificates, the CSI or connectivity, or problems logging into Customs Interactive please have ready:
Your full name
Your organisation name
Your organisation ABN
An extracted copy of the CSI installer or a copy of the CSI installer disk
Access to your exported keys (including the passwords).
Installing digital certificates and software such as the CSI, is moderately complex and requires an understanding of Microsoft applications and control panel settings.
If you are not familiar with these functions, please arrange for your IT representative to call the Cargo Support helpdesk on 1300 558 099 or email cargosupport@customs.gov.au
INSTALLING THE CSI SOFTWARE
The installation of the CSI must be done using the Customs CSI installation CD. The following steps describe how to install the CSI, assuming that you have already opened the Customs CSI installation CD.
To install the CSI software from CD:
Step 1. Ensure the Installer tab on the Customs CSI installation page is displayed.
Step 2. Click on the CSIInstall.exe hyperlink.
Note: Steps 3 and 4 will appear different for users of Microsoft Windows 2000.
The File Download - Security Warning dialog box displays.
Step 3. Click on Run.
The Internet Explorer - Security Warning dialog box displays.
Step 4. Click on Run.
The System Requirements dialog box displays.
Step 5. Click on Continue.
The Software License Agreement dialog box displays.
Step 6. After reading the agreement, click on the Yes button.
The Choose Destination Location dialog box displays.
Step 7. If this is the location where the CSI is to be stored, click on the Next button.
Note: If this is not the correct location, click on the Browse button. The Save As dialog box displays, navigate to the appropriate location and click on the Save button. The Choose Destination Location dialog box redisplays.
The Ready to Install dialog box displays.
Step 8. Click on the Next> button.
The Accessibility Options dialog box displays.
Step 9. To install accessibility options (text-to-speech for the sight impaired), click on the Yes button and follow the instructions displayed.
Otherwise, click on the No button.
The Finished dialog box displays.
To complete the installation, your machine must be restarted.
Step 10. To restart your computer now, click on the Close button.
Your computer will shut down, and restart. Upon logging back in, the CSI will be completely installed.