Manage user certificates

As a user administrator, you can order or revoke certificates, as well as cancel orders for user certificates.

This page is relevant for:

  • user Administrator

If you do not know your role in MitID Erhverv, you can log in to MitID Erhverv and view your own profile. The roles can be found under "Master data" in your profile.

MitID Erhverv: Login

The user administrator is responsible for ordering user certificates, while the user issues and downloads the certificate.

If your organisation has not enabled the issuance of user certificates, you will not be able to order them in MitID Erhverv. The organisation administrator determines whether the organisation issues and use user certificates in the organisation.

What is a user certificate?

A user certificate is not required for logging in or signing digitally with MitID Erhverv. However, certain specialised services may require the user to authenticate with a certificate during login or signing.

You can find general information on user certificates here:

Certificates

What does managing user certificates involve?

In MitID Erhverv, you can manage user certificates by:

Ordering a user certificate

You must meet the following 4 requirements before starting the order process for a user certificate:

  • You hold the role of a user administrator in MitID Erhverv.
  • You have the name of the user for whom you are ordering the certificate.
  • The user for whom you are ordering the certificate must be activated as a user in MitID Erhverv.
  • The organisation administrator has allowed the issuance of user certificates under "Settings" in MitID Erhverv.

Find "Users" via Menu > Users.

You can do this in one of 2 ways:

  • Tap the user’s name.
  • Tap the 3 dots next to the profile and select "Edit".

If the user's email address contains the letters Æ, Ø, or Å, the certificate will not work. Therefore, the email address must be changed before the certificate is ordered. Follow steps 1 and 3 in the guide 'Create new users' to update the email address.

Create, edit, or delete users individually or multiple users simultaneously: Create new users

Once a user is selected, you will see their profile information. Scroll down to find the “User certificate” menu and expand it by tapping.

Please note that the “User certificate” menu will not appear if your organisation does not allow the issuance of user certificates. If the menu is missing, contact your organisation administrator.

Once tapped, the “Order new certificate” window will appear. The “Order new certificate” button will not be displayed if the user is not activated as a user in MitID Erhverv.

Under “Certificate types”, select “User certificate".

Under “Identification method,” choose the method for user identification to ensure that the certificate is issued to the correct person. You can select from the 2 following options:

  • User login
  • Identification via API

The most common method is “User login,” where the user receives an email with a link to log in to MitID Erhverv. If your organisation’s IdM (Identity Management) system integrates with MitID Erhverv via API, you may choose for the system to automatically identify the user for issuing and renewing certificates.

For an in-depth guide on API integration read this page:

Local IdM

Under “Issuance method,” choose how the certificate will be issued. Available options depend on the identification method selected in Step 7.

If “User login” was selected in Step 7, 2 options are available:

  • Internet browser
  • Hardware

If “Identification via API” was selected in Step 7, the option available is:

  • System (EST API)

If you select “Internet browser,” the user can directly issue the certificate via their browser and either install or save it on their computer.

If the organisation has a system directly integrated with MitID Erhverv, you can select certificate issuance through the EST API.

To allow others to search for the certificate in the public certificate database, tick the box “Add the certificate to the public certificate database".

After completing steps 6–9, tap the “Order new certificate” button to finalise the order.

The “Order new certificate” will appear, displaying the order summary for review. Once you have reviewed the details, tap “Confirm Order".

The certificate is now ordered, with a status of “Pending". The user will receive an email with a link to issue the certificate.

Revoke a user certificate

You may revoke a user certificate if:

  • the organisation no longer exists
  • there is suspicion of misuse, e.g., if a computer is stolen
  • certificate information is no longer correct, such as due to a name change

Please note that revoked certificates cannot be reactivated. A new certificate must be ordered.

Find "Users" via Menu > Users.

You can do this by either:

  • tapping the user’s name
  • tapping the 3 dots next to the profile and selecting “Edit”.

Once a user is selected, you can view their information.

Locate the “User certificate” menu and tap it.

Under “User certificate”, you will find the list of the user certificates.

You can revoke the user certificate by:

  • expanding the certificate information and selecting “Revoke” after tapping the arrow next to the certificate status
  • tapping the 3 dots after the certificate’s expiry date and selecting “Revoke”.

The “Delete certificate profile” window will appear. Tap “Ok” to proceed.

The certificate status will now show as “Revoked”, and the user will be notified via email.

Already issued certificates cannot be deleted, only revoked.

Delete an order for a user certificate

You can delete an order before the certificate is issued. If the certificate has been issued, you must revoke it instead (see the guide above on how to revoke a certificate).

Find "Users" via Menu > Users.

You can do this by:

  • tapping the user’s name
  • tapping the 3 dots next to the profile and selecting “Edit”.

After selecting a user, the user information will appear. Expand “User certificate” by tapping it.

Find the certificate with a status of “Pending” and tap “Delete certificate” with a rubbish bin icon.

The “Delete certificate order” window will appear. Tap "Ok" to proceed.

The order is now deleted.

Related topics