United States Nuclear Regulatory Commission - Protecting People and the Environment
Home > Site Help > Electronic Submittals > Apply for a Digital ID Certificate > How to Backup Your Digital ID Certificate

How to Backup Your Digital ID Certificate

Your VeriSign digital ID certificate is stored and accessible via the browser software on your PC. The NRC recommends and supports use of the Microsoft Internet Explorer browser (Version 8.0 and above). Other web browsers may or many not be fully compatible with NRC electronic systems. NRC's digital certificates can be exported from one PC and imported into a different PC. Exporting a certificate does not delete the existing copy but instead makes a duplicate/backup copy. Depending upon the export and import options chosen you can either make a limited copy or a fully functioning copy that can be duplicated. We recommend making at least one full copy as your backup and storing it on a disk drive other than drive C: where your working digital certificate is typically stored. We recommend using the high security setting on your digital ID certificate. You are not allowed to share a digital ID certificate or its password with anyone. Your VeriSign digital ID certificate is installed into your browser.

Export Your Certificate From the Internet Explorer Browser

  1. Open your web browser (Internet Explorer)
  2. Click on the "Tools" menu option
  3. Click on the "Internet Options" menu option in the Tools menu
  4. Select the "Content" tab and click on the "Certificates" button
  5. Select your certificate and click on the "Export" button
  6. In the Export Wizard screen, click on the "Next >" button
  7. Ensure "Yes, export the private key" is the selected, click on the "Next >" button
  8. Select the following on the Certificate Export File Format screen:
  9. Personal Information Exchange
     ☑ Include all certificates in the certificate path if possible
     If offered:  ☑ Enable strong protection
     ☑ Export all extended properties
     Then click on the "Next >" button
  10. Type in an export/import password twice and click on the "Next >" button.
  11. Enter the directory where the certificate is to be stored, name the file, or select the Browse button to navigate to the appropriate file path location.
    (The file's extension or "Save as Type" is Personal Information Exchange (*.pfx).)  Click on the "Next >" button
  12. Click on the "Finish" button to complete the Certificate Manager Export Wizard.
  13. Click on the "Set Security Level" button
  14. Click on the "High" radio button. This will activate password protection for your digital id certificate. Click the "Next >" button to continue.
  15. Enter the new password twice and then click on the "OK" button, then the "OK" button (that the export was successful).
  16. Click on the "Close" button to close the Certificates dialogue box.
  17. Click on the "OK" button to close the Internet Options dialogue box.

For detailed instructions, see NRC's Digital IDs Guide.

Import Your Certificate to Another PC with the Windows XP Operating System and Internet Explorer

  1. Open Internet Explorer and choose the "Internet Options…" option from the "Tools" pull menu.
  2. Select the "Content" tab and click on the "Certificates" button.
  3. Select your certificate and click on the "Import…" button.
  4. Click on the "Next >" button in the Import Wizard.
  5. Enter the directory where the certificate is stored (If browsing choose Files of type: "Personal Information Exchange (*.pfx)"). Click on the "Next >" button.
  6. Enter the export/import password created during the certificate export process. Check the following options: "Enable strong private key protection", "Mark the private key as exportable", "Include all extended properties". Click on the "Next >" button.
  7. Make sure the "Place all certificates into the following store" with Certificate Store: "Personal" is checked and then click on the "Next >" button.
  8. Click on the "Finish" button to exit the Import Wizard.
  9. Click on the "Set Security Level" button (if you get the "Creating a new RSA exchange key" pop-up window).
  10. Click on the "High" radio button. This will activate password protection for your digital id certificate. Click the "Next >" button to continue.
  11. Enter the new password twice and then click on the "Finish" button.
  12. Click on the "OK" button (that the import was successful), then click the next displayed "OK" button.
  13. Click on the "Close" button to close the Certificates dialogue box.
  14. Click on the "OK" button to close the Internet Options dialogue box.

For detailed instructions, see NRC's Digital IDs Guide.

Page Last Reviewed/Updated Thursday, March 29, 2012