Guidebook

NEXUS 7 GUIDEBOOK SECURITY SETTINGS 117
Work with certicates
You can use digital certicates to identify your device for a variety
of purposes, including VPN or Wi-Fi network access as well as
authentication to servers by apps such as Email or Chrome. To
use a certicate to identify your device, you must obtain it with
help from your system administrator, and install it in your device’s
trusted credential storage .
Android supports DER-encoded X.509 certicates, saved in les
with a .crt or .cer le extension. If your certicate le has a .der
or other extension, you must change it to .crt or .cer or you won’t
be able to install it.
Android also supports X.509 certicates saved in PKCS#12 key
store les with a .p12 or .pfx extension. If your key store has some
other extension, you much change it to .p12 or .pfx or you won’t
be able to install it. When you install a certicate from a PKCS#12
key store, Android also installs any accompanying private key or
certicate authority certicates.
If your tablet has multiple users, only the owner can see the cer-
ticate settings.
Install client & CA certicates
To install a certicate from your tablet’s internal storage:
1. Copy the certicate or key store from your computer to the
root of your device’s internal storage (that is, not in a folder).
2. Touch Settings > Personal > Security > Credential storage
> Install from storage.
3. Touch the lename of the certicate or keystore to install. Only
certicates that you haven’t already installed are displayed.
4. If prompted, enter the key store password and touch OK.