Our university IT services, such as WLAN, require the installation of root certificates in order for your end device to classify university systems as trustworthy. These certificates must be installed separately on each end device.

You can access internal university services for students and staff via the "HSHL" WLAN.

Go to

• How to install root certificare for Windows
• How to install root certificare for Android
• How to install root certificare for Linux
• How to install root certificare for MacOS
• How to install root certificare for iOS / iPad OS
• Root certificate

How to install the root certificate

Windows 10

1. Download the root certificate HshlRootCa01-R1.crt by clicking on the link provided above.
2. Open the downloaded file with a double click.
3. Please first check whether the certificate is HshlRootCa01-R1.
4. Now "Install certificate..." → Select "Current user location" → Click on "Next" → Select "Automatically select certificate store" → Click on "Next" → Now confirm the settings with "Finish". → Certificate is installed and confirm with "Ok".

The Sectigo root certificate: AAACertificateServices.cer must be installed in the same way.

Android

1. Download the root certificate HshlRootCa01-R1.crt, by clicking on the link provided above or scan the QR code provided using the "Camera App" on your Android smartphone.
2. Open "Settings" öffnen (cog wheel)
3. Enter "Certificate" in the search field at the top right to navigate to the certificate settings.
4. Confirm privacy notice with "Install anyway".
5. You will now be asked for the screen lock code, please enter it.
6. Select the download folder in which the file was saved and select the downloaded certificate "HshlRootCa01-R1.crt".
7. The certificate is now installed.

HSHL root certificate: https://pki.hshl.de/certdata/HshlRootCa01-R1.crt

Sectigo root certificate: https://pki.hshl.de/certdata/AAACertificateServices.cer

The Sectigo root certificate: AAACertificateServices.cer must be installed in the same way.

Linux

The steps listed here may vary depending on the Linux distribution.

1. Download the root certificate HshlRootCa01-R1.crt by clicking on the link provided above.
2. Open the terminal window.
3. Navigate to the location of the CRT certificate using the command "cd path/to/certificate". (Example: "cd Downloads/")
4. Copy the CRT certificate to the folder "/usr/local/share/ca-certificates/" using the command "sudo cp HshlRootCa01-R1.crt /usr/local/share/ca-certificates/".
5. Update the certificate trust list with the command "sudo update-ca-certificates".
6. Open the file explorer.
7. Check whether the file "HshlRootCa01-R1.crt" is stored under the path "/etc/ssl/certs/".

The Sectigo root certificate: AAACertificateServices.cer must be installed in the same way.

MacOS

1. Download the HSHL root certificate to the download folder: HshlRootCa01-R1.cer.
2. Open the "Keychain management" via the "Finder" by entering "Keychain management" in the right-hand search field. Open "Keychain management", the Mac administrator password may be requested.
3. Now select "Login" on the left-hand side and add a new certificate.
4. Select "Downloads" and select the certificate (HshlRootCa01-R1.cer), then add the certificate via "Open".
5. Find the HSHL root certificate (HshlRootCa01) in the certificate list and double-click to open it. To classify the certificate as trustworthy, click on "Trust" in the drop-down menu and then select the following: "When using this certificate: Always trust". Confirm the changes by closing the window and enter the Mac administrator password as soon as you are prompted to do so. After confirmation, the certificate is classified as 'Trusted'.

The Sectigo root certificate: AAACertificateServices.cer must be installed in the same way.

iOS / iPad OS

HSHL root certificate

https://pki.hshl.de/certdata/HshlRootCa01-R1.crt

Sectigo root certificate

https://pki.hshl.de/certdata/AAACertificateServices.cer

1. Open the camera app on the iPhone\iPad and scan the QR code for the certificate you want to install. Open the displayed link.
2. Confirm the message "This website is trying to load a configuration profile. Do you want to allow it?" By clicking "Allow".
3. Open "Settings" on the iPhone (gog wheel) and select "Profile loaded". The HshlRootCA01 certificate can now be installed (click "Install").
4. To confirm the changes, enter the "screen code" or use Touch ID / Face ID. Confirm the installation again by clicking "install". The certificate is now installed.

For the Sectigo root certificate: AAACertificateServices.cer must be installed in the same way.

Root certificates

HSHL root certificates

https://pki.hshl.de/certdata/HshlRootCa01-R1.crt

https://pki.hshl.de/certdata/HshlRootCa01-R1.cer

Sectigo root certificates

https://pki.hshl.de/certdata/AAACertificateServices.cer