USER GUIDE FOR AELB USER

VERSION 2.4

UPDATED
8-5-2018

POS DIGICERT SDN BHD (457608-K)

8-3A-02, Star Central, Lingkaran Cyberpoint Timur,
63000 Cyberjaya,
Selangor Darul Ehsan.

1
Contents

IMPORTANT NOTES: ............................................................................................................................... 3

STAGE 1: HOW TO DOWNLOAD AND INSTALLATION CAPICOM.EXE SOFTWARE? .............................. 4
STAGE 2: HOW TO DOWNLOAD ALL 3 CERTIFICATES FROM YOUR 1CRS ACCOUNT?.......................... 9
STAGE 3: HOW TO INSTALL PERSONAL DIGITAL CERTIFICATE (SOFT CERT)? ..................................... 10
STAGE 4: HOW TO INSTALL DIGICERT CLASS 2 ROOT CA? .................................................................. 14
STAGE 5: HOW TO INSTALL DIGISGN ID BASIC 2048? ......................................................................... 18
STAGE 6: HOW DO I KNOW ALL CERTIFICATES HAS BEEN INSTALLED SUCCESSFULLY? ..................... 21
STAGE 7: WHERE WERE ALL 3 CERTIFICATES BEEN STORE AFTER INSTALLATION? ........................... 23

2
IMPORTANT NOTES:
1. Please ensure download and install capicom.exe software base on to the instruction below.
2. There are 3 type of certificates need to be install before you able to use your digital certificate.
- ROOT CERTIFICATE = DIGICERT CLASS 2 ROOT CA
- INTERMEDIATE CERTIFICATE = DIGISIGN ID (BASIC) 2048
- PERSONAL DIGITAL CERTIFICATE = CERTIFICATE ISSUED TO APPLICANT NAME
3. Please install all 3 certificates mentioned above accordingly to avoid inconvenience cause.
4. Please ensure all 3 certificates been displayed under Certification Path before login to system.
5. Please check and upgrade your current Kaspersky Antivirus from 2018 to 2019 for free to avoid login problem.

BELOW IS THE SAMPLE OF 3 CERTIFICATES THAT BEEN SUCCESSFULLY INSTALLED.

General tab Certification Path tab

Layer 1: ROOT CERTIFICATE

Layer 2: INTERMEDIATE
CERTIFICATE
Layer 3: PERSONAL DIGITAL
CERTIFICATE

3
STAGE 1: HOW TO DOWNLOAD AND INSTALLATION CAPICOM.EXE SOFTWARE?

1. Click on CERTIFICATE MANAGEMENT after successfully login into your 1CRS account.

2. Click on Action as shown below.

3. Click on Capticom to download the software as shown below.

Note: Please remember where did you saved this software.

4. Please go to the folder that you saved the Capicom software. Then click on the
CapicomInstaller.exe as shown below.

4
6. Click ‘Next’ if the following screen appears.

7. Click next if the following screen appears.

8. Click ‘Next’ if the following screen appears.

5
9. Click Close if the following screen appears. You had successfully installed Capicom software
now.

Note: Add AELB URL (https://elesen.aelb.gov.my) to the Trusted Site based on steps 9-

10. Go to AELB website (https://elesen.aelb.gov.my/esppuser/)

11. Click on Tools as shown below.

6
12. Click on Internet Options as shown below.

13. Click ‘Security’, > Click Trusted sites.

14. Tick ‘Enable Protected Mode’ > Then click Sites as shown below.

15. Click ‘Add’ button if the following screen appears.

7
16. You had successfully add the https://elesen.aelb.gov.my as shown below.
17. Click Close.

18. Click Ok to end process.

8
STAGE 2: HOW TO DOWNLOAD ALL 3 CERTIFICATES FROM YOUR 1CRS ACCOUNT?

1. Click on CERTIFICATE MANAGEMENT after successfully login into your 1CRS account.

2. Click on Action as shown below.

3. Click Roots to start download. (In the zip file contain the following certificates).
- ROOT CERTIFICATE = DIGICERT CLASS 2 ROOT CA
- INTERMEDIATE CERTIFICATE = DIGISIGN ID (BASIC) 2048
4. Click Soft Cert to start download. (Soft Cert contain personal digital certificate).

NOTE: Once you had downloaded all 3 certificates, please proceed to stage 2 to begin installation process.

9
STAGE 3: HOW TO INSTALL PERSONAL DIGITAL CERTIFICATE (SOFT CERT)?

1. Now go to the folder that you saved those 3 certificates. Then double click on CERT (.p12) as
shown below.

2. Click Next if the following screen appears.

3. Click Next if the following screen appears.

10
4. Please enter Soft Cert Password/PIN that you had received via email, then tick all boxes,
click Next if the following screen appears.

5. Click Next if the following screen appears.

11
6. Click Finish if the following screen appears.

7. Click on Set Security Level if the following screen appears.

8. Click High and Next if the following screen appears.

12
Note: Now you require to change your Soft Cert PIN/Password to your own PIN/Password.
: Please keep the old PIN that you received for reinstallation purpose.

9. Enter new password, minimum password length is 8 characters.

You may need enter at least 1 uppercase letter, 1 lowercase letter, numbers.
(Example: Abcd1234, Axyz0102).
Then click Finish after enter new password.

10. Click OK if the following screen appears.

11. Click OK if the following screen appears. Your soft cert (user certificate) has been
successfully installed/imported. Please continue to install the rest of the certificates
(Digicert Class2 Root and Digisign ID Basic 2048).

13
STAGE 4: HOW TO INSTALL DIGICERT CLASS 2 ROOT CA?

1. Double click on class2root.cer as shown below.

2. Click Install Certificate if the following screen appears.

3. Just tick on Current User, then click Next if the following screen appears.

14
4. Tick on “Place all certificate in the following store” then click Browse if the following screen
appears.

5. Tick on Show physical stores box if the following screen appears.

6. Double click on Trusted Root Certificate Authorities if the following screen appears.

15
7. Select Registry then click OK if the following screen appears.

8. Ensure the Certificate store is correct then click Next if the following screen appears.

9. Click Finish if the following screen appears.

16
 10. Click Yes if the following screen appears.
Note:
Why the following screen not appear?
1. Because you had wrongly install this Root certificate.
2. Or this Root certificate already been installed successfully before this. Refer stage 6 to double check the certificate.

11. Click OK if the following screen appears.

17
STAGE 5: HOW TO INSTALL DIGISGN ID BASIC 2048?

1. Double click 2048DigisignIDBasic.cer as shown below.

2. Click Install Certificate if the following screen appears.

3. Tick Current User then click Next if the following screen appears.

18
4. Tick Automatically select the certificate store based on the type of certificate, then click
Next if the following appears.

5. Click Finish if the following screen appears.

6. Click OK if the following screen appears.

19
7. Click OK to close the following screen.

20
STAGE 6: HOW DO I KNOW ALL CERTIFICATES HAS BEEN INSTALLED SUCCESSFULLY?

1. Open/Launch Internet Explorer > Then click Tools

5. Then click Internet Options > click Content > click Certificates > click Personal as shown
below > Double click on the name of the user as shown below.

6. Below is user personal certificate. Click Certification Path as shown below.

21
7. Please make sure you can view 3 layers of certificates as show below.
Note: If 1 of the layer has missing, then you will face difficulty to access to system. Please double check again.

22
STAGE 7: WHERE WERE ALL 3 CERTIFICATES BEEN STORE AFTER INSTALLATION?

Personal Digital Certificate

Location: Launch/open Internet Explorer > click Tools > Internet Options > Content > Certificates >
Personal > Personal certificate should be displayed as shown below.

Root Certificate
Location: Launch/open Internet Explorer > click Tools > Internet Options > Content > Certificates >
Trusted Root Certification Authorities > Digicert Class 2 Root CA certificate should be displayed as
shown below.

Intermediate Certificate
Location: Launch/open Internet Explorer > click Tools > Internet Options > Content > Certificates >
Intermediate Certification Authorities > Digisign ID Basic 2048 certificate should be displayed as
shown below.

THANK YOU. YOU CAN PROCEED TO USE YOUR DIGITAL CERTIFICATE NOW.

23