Skip to content
v26.3

DiKAS Certificate on Windows

In the business network, open http://<LAN-IP>/installcerts and compare the fingerprint with the main POS.

  1. Download Everything as ZIP (dikas-zertifikate.zip).
  2. Right-click the ZIP and choose Extract All.
  3. In the extracted folder, right-click dikas-ca-installieren.cmd and choose Run as administrator.
  4. The window reports "Zertifikat fuer alle Benutzer dieses Computers eingetragen". Press any key and restart the browser.
  5. Test https://dikas-<SystemId>.local.

Instead of the ZIP you can also download dikas-ca-installieren.cmd and dikas-local-ca.cer individually – both must be in the same folder.

Without administrator rights, the script installs the certificate only for the logged-in user. Windows asks once whether you trust the certificate – confirm with Yes if the fingerprint matches. Other users of this PC must then run the script themselves.

Note from Windows SmartScreen

If Windows reports "Windows protected your PC", choose More info → Run anyway. The script only calls the Windows tool certutil.

Manually without the script

  1. Download dikas-local-ca.cer.
  2. Open the file and choose Install Certificate.
  3. Choose Local Machine. Windows requires administrator rights for this.
  4. Choose Place all certificates in the following store and then Trusted Root Certification Authorities.
  5. Finish the wizard and test https://dikas-<SystemId>.local.

Main POS and DiKAS client

On the Windows main POS, the DiKAS service performs the installation automatically for the whole machine. The DiKAS client additionally stores trust separately per business and asks explicitly on first contact. If the fingerprint has changed, it shows the old and the new value; cancelling leaves the existing entry unchanged.

Firefox

If Firefox shows a warning despite the installed certificate, additionally import dikas-local-ca.crt into Firefox: Settings → Privacy & Security → View Certificates → Authorities → Import and tick "Trust this CA to identify websites".

Remove old certificates

Several business CAs can remain installed in parallel. Remove CAs that are no longer needed with certlm.msc (for the whole computer) or certmgr.msc (your user only) from Trusted Root Certification Authorities → Certificates. Check beforehand that no workstation still accesses this business through it.

Back to the overview.