Nexus 7 Guidebook seCuRe YouR TAbLeT 77
Android also supports X.509 certicate s saved in PKCS#12 key
store les with a .p12 or .pfx extension. If your key store has some
other extension, you mu ch change it to .p12 or .pfx or you won’ t
be able to install it. When you install a cer ticate from a PKCS#12
key store, Android also ins talls any accompan ying private key or
certicate authori ty certic ates.
Install client & CA certi cates
To install a certicate from yo ur tablet’s inte rnal storage:
1. Copy the certicate or key s tore fro m your compu ter to the
root of your device’s intern al storage (that is, n ot in a folder).
2. To uch Settings > Personal > Security > Credential storage
> Install from storage.
3. Touc h the lename of the certica te or keystore to install. Only
certicates that you have n’t already ins talled are displ ayed.
4. i f prompted, ente r the key store passwor d and touch oK.
5. E nter a name for the ce rticate and tou ch oK.
Typically, a CA certicate included with a client c erticate is in-
stalled at the same tim e. You can also ins tall separate C A certi-
cates using the same steps.
if you have not already set a pat tern, PiN, or password for yo ur
device, you’re prompted to s et one up. The typ e of lock that’s ac-
ceptable may be predeter mined by your syste m administrator.
You can now use the certicate that you installed when connect-
ing to a secure network or fo r client authenticatio n with email,
Browser, and third-p arty apps. A fter a certi cate is install ed suc-
cessfully, the copy in stora ge is deleted.