Certificates
This page describes the current solution for ordering server certificates for servers at KI.
Updates on the page
New solution for server certificates
The national SUNET agreement with Sectigo has ended, and new server certificates are now being sourced through the supplier Harica.
Server certificates
You need a server certificate to ensure that your computer communicates with the correct server and that the traffic cannot be intercepted or altered. Server certificates come in various shapes and are usually installed in web servers, mail servers, etc.
To apply for a certificate
Step 1: Delegation application
In order to be able to apply for a server certificate, you need to have delegation approval from your Head of Department. Fill in the application form Delegeringsansökan (delegation application) with the names of the individuals who may order a server certificate, and send it to certifikat@ki.se. You don't need to fill in the form if you already have a delegation from your Head of Department.
The delegation application form (Delegeringsansökan) supports digital/electronic signatures, and there is room for multiple signatures. All signatures must be digital/electronic for the application to be approved. If you do not have a personal certificate, you must print and sign the form manually. Scan the form with the signatures and send it to certifikat@ki.se.
Step 2: Create an account with your KI e-mail and apply for a server certificate at Harica
Create an account and apply for a server certificate at Harica
Important notice
The private key must be protected against unauthorized access. It should be backed up, and all backups of the private key must be protected against unauthorized access.
Terminated certificates
If the certificate is no longer in use or if you suspect that the private key for a certificate has got into the wrong hands, the certificate has to be terminated.
Contact Helpdesk or certifikat@ki.se as soon as possible.
Personal certificates
Currently, it is not possible to issue new or extend existing personal certificates.
If you have any questions about certificates, please contact Helpdesk.
The future of server certificates
The IT Office will work towards automating certificates using ACME at a free provider such as Let's Encrypt, ZeroSSL, Google or equivalent.
The assessment is that it is not sustainable to manage certificates manually as we have done in the past as the validity period continues to be shortened - the entire industry intends to reduce this to 45 days in 2027, which will mean far too much work to keep updating the certificates manually.