Personal Certificate Client Installation SAT Version

The SAT version of the Personal Certificate Client (PCC) is intended only for Mexican users requiring a certificate for the Tax Administration Service (SAT). All other users should refer to Personal Certificate Client Installation.

The SAT version of the Personal Certificate Client (PCC) can be installed on Windows or macOS.

The following sections provide separate installation instructions for these Operating Systems:

• Installing the SAT PCC on Windows

• Installing the SAT PCC on MacOS

External URLs

During normal operations the PCC sends requests to external URLs. Most commonly, these are URLs that contain the artifacts required to build a valid certificate chain and retrieve revocation data for various certificates. For example, the certificate used to sign documents, or TLS certificates.

If your environment restricts access to the internet then access to some of these external URLs may be blocked, which may prevent the PCC from functioning normally. Currently, the following domains are known to be accessed by the PCC and may be blocked by your internet policy:

• digitalcertvalidation.com

• digicert.com

• globalsign.com

Note that this list is incomplete. It does not include, for example, the domains in which the URLs containing the revocation data for end-users’ signing certificates are hosted.

If you restrict access to the internet you must compile a list of the external URLs the PCC is trying to access in your particular environment, using various publicly available third-party tools and/or the features of your firewall. For example, the following tools could be used to retrieve a list of external URLs for a specific environment:

• Sysinternals Process Monitor (https://learn.microsoft.com/en-us/sysinternals/downloads/procmon),

• Wireshark (https://www.wireshark.org/),

• Telerik Fiddler (https://www.telerik.com/fiddler).

Once this is done, you must whitelist these URLs to allow the PCC to work.

Installing the SAT PCC on Windows

On Microsoft Windows Operating Systems, the SAT PCC is installed via an application that is implemented as a MSI file.

To download and install this MSI file, click here: MSI file for the PCC 2.3 SAT Edition.

If you continue to need a legacy version of the PCC, you can download it by clicking here: MSI file for the PCC 2.2.3. Edition.

Installing the SAT PCC on MacOS

On macOS Operating Systems, the installer for the SAT Personal Certificate Client (PCC) is distributed as a *.pkg file.

To download and install this *.pkg, click here: pkg file for the PCC 2.3 SAT Edition

If you continue to need a legacy version of the PCC, you can download it by clicking here: pkg file for the PCC 2.2.3 Edition.

To install the SAT PCC on macOS via a Graphical User Interface:

1. Copy the installation file “OneSpanPersonalCertificateClientSAT-2.3.pkg” to a suitable directory on your local machine (e.g., ~/Downloads).

2. Double-click that installation file. An Installer starts, and a wizard appears.

3. Interact with the wizard’s sequence of dialog boxes until you’ve completed the installation.