Certificate Request Wizard (CRW)

Here you will find information on the CRW tool for the standard class C certificate.

PKI Bild Zertifikate
The Certificate Request Wizard (CRW) is a stand-alone tool that is installed on a federal workstation client. Owners can use the CRW to locally generate certificate signing requests (CSRs) for certificates for which they are authorised. The CRW then automatically sends these CSRs to the Swiss Government PKI. The SG PKI arranges verification and confirmation of the data entered for the certificate recipient specified in the email address of the request. The certificate is then issued and can be collected by the user and passed on to the certificate recipient.

As an alternative to CSR creation via the wizard, a prepared CSR can also be pasted into the tool and sent off as a request.

Prerequisite

  • Completion of a training course on the tool and the underlying processes is a prerequisite for authorisation as a standard class C LRAO.
  • In addition, the individual certificate types (policies) to be issued must be requested. The form must be digitally signed with the Swiss Government PKI's class B certificate.

CRW tool

  • The CRW tool is part of the federal workstation client (BAB) and is installed as standard in the Swiss Government PKI layer II toolkit.

Ordering

People wishing to use the CRW must be registered as class C LRA officers with the Swiss Government PKI. The rules of the CA/browser forum apply to registrations as class C LRAOs and authorisation requests for the desired certificate types. This means that the user agreements and terms of use must have been signed and accepted beforehand, and the guidelines taken note of.