What is a "client certificate" and how can I get one?

Certificates can digitally prove users' identity to other users or services. Different authentication methods can be used to authenticate a user within a specific context. S/MIME adds a cryptographic authentication layer to e-mail communication. Using client certificates, users have cryptographic proof that an e-mail or document originates from a particular user and that the information was not modified. In addition, users can encrypt information and make communication confidential between users. Besides the use with e-mail, digital certificates can be used within different contexts:

• Securing e-mail communication with S/MIME (e.g., with Outlook, Thunderbird)
• Online identity verification (e.g., in online registration processes)
• Online authentication (e.g., on websites or other services)

TUM provides X.509 user certificates free of charge in collaboration with DFN and the DFN PKI for its members, which can be used for the purposes described above. Additional information

These client certificates are not suitable for signing documents in the context of TUM and do not meet the requirements for qualified signatures. These client certificates are also not an alternative to advanced signatures for documents created in accordance with eIDAS.

Find here how you can obtain a certificate

Please read our step-by-step instructions. on how to import the certificate into your e-mail client.