> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/configure-certificate-x.509-credential-entry-type.md).

# Configure certificate x.509 credential entry type

The ***Certificate (X.509)*** credential entry type facilitates RDP Smart Card authentication, and stores the full X.509 certificate (public and private portion) for insertion into an RDP virtual Smart card.

Some organizations use X.509 certificates as as alternative to authenticating with user IDs and passwords. X.509 certificates leverage public-private key cryptography, and are widely seen as an enhanced safeguard against malicious network impersonators.

{% hint style="success" %}
For those using the deprecated ***Certificate (.pfx, .cert, .cer, .p12, .pem)*** entry, you may wish to import your certificate in a ***Certificate (X.509)*** entry instead.To do so, head to the deprecated entry, click ***Save document as***, save the certificate as a `.pfx` file. Then, import it as per the [steps below](#stored-in-database).
{% endhint %}

1. Add a new entry in Remote Desktop Manager.
2. Go to ***Credential management***, select ***Certificate (X.509)***, and click ***OK***.

   ![](https://cdnweb.devolutions.net/docs/RDMW4445_2026_1.png)
3. Enter a ***Name*** and select a ***Folder***.
4. Under ***General***, select ***Stored in database*** or ***Link to certificate store*** in the ***Certificate data mode*** drop-down menu.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2344.png)

### Stored in database

1. Select ***Update certificate*** under ***General*** – ***Embedded X.509 certificate*** to import an X.509 certificate.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2345.png)
2. Choose the ***Certificate file*** and click ***Next***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2346.png)
3. Choose a ***Private key file*** if needed and click ***Next***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2347.png)
4. Click ***Finish*** to close the window.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2348.png)
5. Select ***View certificate*** to view certificate information and install the certificate.
6. In the ***Certificate window***, click ***Install certificate***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2349.png)
7. Select the ***Store Location***: ***Current user*** or ***Local machine***. Click ***Next***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2350.png)
8. Choose the ***Certificate store***. Click ***Next***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2351.png)
9. Click ***Finish*** to complete the import.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2352.png)
10. Select the ***PIN*** of the ***Smart card*** if needed. Click ***Add*** to save the entry.

    ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2353.png)

### Link to certificate store

1. Select ***Current user*** or ***Local machine*** under ***Certificate location***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2354.png)
2. Choose the ***Certificate store*** in the drop-down menu.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2355.png)
3. Choose ***Thumbprint*** or ***Subject name*** in ***Certificate find type***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2356.png)
4. Enter the ***Search text***. Click ***Test configuration***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2357.png)
5. Select the ***PIN*** of the ***Smart card*** if needed. Click ***Add*** to save the entry.

   ![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB2353.png)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/configure-certificate-x.509-credential-entry-type.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.