Abstract: A system for administering certificates involves the generation, distribution and recall of certificates for public key systems. The generation comprises generating encryption keys and personalizing smart cards. The system is designed as a distributed system and is divided into a central unit with one or more associated terminal units. Each terminal and center is allocated unique certified identities. Mutual checking of access rights and data contents is carried out between the central unit and each terminal unit. An issued certificate can be traced back to the individual responsible for the issuing, compatibility with standards being seen to exist. Personalization of cards is integrated in each terminal.