How to install an fnmt digital certificate on mobile or computer [easy]

If you have found yourself in the situation of having to carry out some type of procedure before a public body or body - such as, for example, filing a tax return -, you probably already know the concept of digital certificate or electronic certificate.

Therefore, you will also know that to identify yourself and therefore be able to carry out any type of management before administration, you must first have obtained your certificate and perform its subsequent installation on yours Windows computer or Android mobile phone, or on your iPhone or macOS computer.

And while it may seem like a bit of a tedious process, the truth is it is easier than it looks at first sight. In this guide we explain to you how to obtain, download and install a digital certificate, so as to be able to carry out the procedures with the official bodies, whatever the device you decide to use.

Content index:

• What is a digital certificate and what is it for?
• How to get your digital certificate
• How to install and use a digital certificate on Android
• How to install and use a digital certificate on iOS
• How to install and use a digital certificate in macOS
• How to install and use a digital certificate in Windows

What is a digital certificate and what is it for?

First of all it is better to understand what digital certificates really are. In principle, they are files that integrate all those identification data that have been authenticated through an official body.

Therefore, this type of certificate is used for confirm our identity to those entities that require a more secure authentication method than a simple password; They need to make sure that the natural person who is trying to perform the procedures is actually you.

That's why, without a digital certificate confirming our identity, some official procedures cannot be performed on the Internet, although alternatives such as the Cl @ ve system have been introduced in Spain in recent years. Hence the importance of knowing install and use one of these certificates.

How to get your digital certificate

Obviously before proceeding with the installation you need to have generated your own certificate. To do this, you need to follow the process which is explained on the official website of the National Currency and Stamp Factory and which is summarized in the following steps, to be performed in the order in which they appear:

1. Make the certificate request, both from the web version - accessible only through Internet Explorer or Mozilla Firefox up to version 69 - and through the Android application.
2. Proof of identity in a registry office. You must go to one of the offices to prove your identity and accept the certificate treatment. You can use the official office locator to find the one closest to your location.
3. Download the certificate on your device, available approximately one hour after the identity accreditation process at a registry office.

Now with the electronic certificate you already have, it's time to proceed with its installation.

How to install and use a digital certificate on Android

Nearly 100% of today's Android smartphones and tablets offer the option to install digital certificates. Furthermore, the installation process is similar in all.

1. Download and install the root certificate

The first step when installing a digital certificate is make sure you have the root certificate issued by the responsible official body. In Spain, it is the national factory of currency and stamps. Therefore, you will have to access the Royal Mint Root Certificates page and download the root certificate.

Therefore, you will have downloaded a files with the extension.pfx, .p12, .cer or.crt, which you will need to install. To do this, simply tap on the download notification or use a file explorer to search for it in the phone's internal memory. Either way, you'll see one installation window in which you can name it and choose what it will be used for.

If all went well, a Toast type message will appear at the bottom of the screen indicating that the root certificate was installed successfully. However, you can make sure if, on your mobile, you access the menu Settings> Security> Other Security Settings> User Certificates.

2. Generate and install your digital certificate

You have already installed the root certificate of the FNMT, but this is not sufficient to identify yourself and carry out the procedures with the different public administrations. Now you have to generate your certificate with all your data in case you don't have it yet. Fortunately, the process is as simple as the previous one, albeit a little more tedious.

The first thing to do is download and install the "Get FNMT certificate" app on your mobile, available through Google Play.

Once inside, tap the button «Request» e Insert your data. Now you just have to accept the different conditions and terms that will appear on the screen, and finally follow the steps indicated to obtain the certificate, the most important is to visit a registry in person to confirm your identity and then admit the treatment of the certificate.

When the certificate is available, it will be enough download it from the application itself, in the "pending requests" section. It is also recommended that you make a backup copy of both the certificate and the included password.

Finally, to install the certificate on your mobile, you just have to follow the same steps as in the previous procedure: find the downloaded file with an exporter and open it to install the certificate. In case you have already generated your certificate previously through a path other than the mobile app, you just have to copy it to the internal memory of your mobile and install as usual.

And this is all. If all went well, the your digital certificate will be installed on the device and you can use it to identify yourself in public bodies and entities to carry out the procedures.

How do you use a certificate already installed on Android?

You now have your certificate installed on your mobile but how can you use it to identify yourself? In general, all those applications and web pages that require identification via a certificate include support for the native Android certificate system. Therefore, if you select the “digital certificate” option as the authentication method, a window with the list of installed certificates. You just have to select your personal certificate and tap «Accept».

How to install and use a digital certificate on iOS

Installing the certificate on an iPhone or iPad may seem more confusing than on other devices, but you just need to follow a few simple steps:

• The first thing to do is to have the certificate on your iPhone or iPad, so it's best to send it by email or by uploading it to a folder in iCloud Drive.
• On the iOS device, locate the certificate with extension .pfx, .p12, .cer or.crt from the Mail app or the Files app
• Click on this file and choose the iPhone or iPad to install it.
• Enter the Settings and at the top you will see a new section called Profile downloaded, April.
• You will see the profile of the digital certificate, click on it and Install.
• You'll enter the unlock code for your iPhone or iPad and probably the password for the certificate.
• Il profile will be installed, don't worry if you see it's unsigned.

From now on you can confirm your identity on official websites thanks to the digital certificate you have already installed on your iPhone or iPad.

How to install and use a digital certificate in macOS

Installing the digital certificate in macOS is very simple since the operating system itself has an application called Keychain Access, you need to follow these steps:

• The first thing is open the digital certificate file, locate it and double-click.
• The Keychain Access app will open and now click Add.
• In case that doesn't work, you just need to find and open Keychain Access and click File> Import Entry, then select the certificate we have on the computer.
• If necessary, enter your password.

Now you can use your electronic certificate on your Mac every time you use Safari or Chrome, if you use Firefox you have to configure it specifically from Firefox> Preferences> Security and Privacy> Certificates.

How to install and use a digital certificate in Windows

Having the digital certificate on your Windows computer is a great advantage in carrying out public procedures. Before installing it, the National Currency and Stamp Factory (FNMT) recommends updating Windows with the latest version and the latest security patches. Also, you have to download and install from the same computer and browser from which you made the request.

I web browser useful for using the digital certificate on your computer are:

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Opera
• Safari

The most suitable browser to use the digital certificate is Google Chrome, which does not require any particular configuration for him. If you continue to work with Internet Explorer, for example, you will need a series of changes in the browser configuration that you can make directly with the automatic configurator of the FNMT.

Once you have requested the digital certificate and downloaded to your computer, as we explained above, it is time to install it. Step by step, we will explain the whole process to install the digital certificate in Windows.

1º- Search your computer for the digital certificate you just downloaded, it can be in “.pfx”, “.p12”, “.crt” or “.cer” format. Change the name to make it easier to find in the future. Therefore double-click the file to open it.

2º- When you open it, Windows will launch a certificate import wizard that will guide you through the whole process. The first thing you need to select is the location of the store, choose whether the certificate will be saved in the current user's or current team's store. When you have decided, click Next.

3º- Next, you have to select the file you want to import, which will be the digital certificate you just downloaded. After selecting it, click Next.

4°- In this way you will arrive at one of the key steps of the installation, since in the new window you will have to enter a password with which you will protect your digital certificate. Under «Password», you will find a text field in which you have to write that private key.

First you need to tick the three boxes that appear at the bottom, which will allow that key to protect the certificate and make it exportable to be able to make a backup copy or transport it to other computers at any time. The three boxes you need to enable are:

• Enable secure private key protection. If you enable this option, you will be notified every time the private key is used by an application.
• Mark this key as exportable. This will allow you to back up your keys or transport them later.
• Include all extended properties.

When you enter your password and check the boxes, click Next.

5º- In this step, you need to tell the assistant if you want that automatically selects the certificate store where your digital certificate will be saved or if you prefer to select it manually. When done, click Next.

6º- In this way you will access the final screen of the wizard, which will show you a summary with the installation data: the selected warehouse, the contents and the file name. To complete the installation, click Done and you will be able to use your digital certificate in Windows.

How to use the digital certificate in Windows

Once the digital certificate is installed on your computer, it is time to use it to carry out public procedures on websites such as the Revenue Agency or Social Security. You we recommend doing it via the Google Chrome browser, one of the best functions it can offer you when using the digital certificate.

When you try to do personal management on public body websites, you will need to identify yourself using one of the following options: user, cl @ ve PIN, electronic DNI or digital certificate. Select the latter for display a window in which you will have to select the digital certificate in your name and click OK.

The page will confirm automatically the your identity and will allow you to complete the online procedure. In this way, with the digital certificate installed in your Windows you will save precious time by not having to personally go to the offices of public bodies to carry out these procedures, you can do it with your computer.

Ángel Roca and Beatriz Alcántara contributed to this guide.