Partner User Manual
Contents
1. ACCOUNT WIDE FUNCTIONS CREATING MANAGING USERS USER ROLES You may add additional Users to your GCC account Depending on their privileges newly created Users may place new certificate orders add Deposit funds or perform reporting Users are defined in roles e Account Administrator Users who are the top level account owner can see all menus perform all functions and have the ability to create new Managers and Staff in Charge e Manager Users who have their administration rights defined by the Account Administrator and can create Staff in Charge e Staff in Charge Users who have their administration rights defined by the Account Administrator or the Manager Unlike Account Administrators and Managers Staff in Charge cannot create additional Users 24 CREATING NEW USERS AND UNDERSTANDING USER ADMINISTRATION RIGHTS To add a new User click Manage Users under Account Management Click New Registration Complete the details of the new User and select their role by selecting either Manager or Staff in Charge in the User Permissions Set their privileges as follows e Certificate Approval Permission o Set to True if you wish the User to be able to place orders that do not need approval and approve certificate orders placed by other Users who do not have Certificate Approval Permission o Set to False if the User should not have approval permission nor should be allowed to place certificate orders without the order being approv2. cccccceeseeesssessessesssseesssesseeeseeessssensneseeseeeesetagas 6 Teno PUKO TO ccsectorwnsvatet nines E EE A E E E A AE ease 7 PAd DEDO e E A E E AS 7 How to Pay for your Bulk Order Add Deposit Amount sssessssssssssssessssssssssesssssssssesseseeeeesssererrerrrrererererrrrrrrrrrrrrreens 7 Ordening SOL COURICALES rosiorii ones usnuesent E sauce nolsepavscaconeisiontosagsan centers yar seardarsegususmconcianes 8 Completed FU AppICaHON i sscsienat geninan enaA N asus vensain sia vawuanesserie savarvnnsaniavoacuansannaueesenoacteaune tae 8 Adding Subject Alternative Names SANS cssssscccccecccceessseeccceeeeeesseccceeeeaeaeeeseceeeeeeaueessecceeeeeeagegssseceeeeeeagngseeeeeeeeas 11 Jine OO WGK SE enee E E EE timenaentesbek deanna eae dani E AE E AS E 12 Types of OCC Gio SV OS cea E a E E 12 Payment for OneClickSSL Vouchers wxccscsdsantncsesceeinedageisurconsadexesnneustue a a ia EEA ENa aa 13 Obtaining a OneClickSSL Single Site VOUCHEL cccccccccssssecececeeseccccaesseceeseesseccesauauseceeeseaseceesesaueceeseeaaaeseessaaaeeeeees 13 minate a Cer E ena A ES E AEE EES 14 Managing Existing Customers SSL Certificate Applications cccccccsssseccccsceeseccecceeecccesaessececsauaaeeceeseaaseceessuaaecesssaaaeeees 14 Viewing Outstanding amp Completed Orders cccccccsssssecccceeesecccccaeeecccseeeeceeseaeeseceesseaeceessaaseceesauaseeseeeseaneeeesauaaeeeeeas 14 I HIT Se ica UE PIN cg east eet A E OE A A
3. o Unlimited license contract for an annual fee the Partner can issue an unlimited number of Vouchers Some restrictions may apply o Monthly invoicing the Partner is invoiced monthly for number of Vouchers issued e Supervouchers o Unlimited license contract for an annual fee the Partner can issue an unlimited number of Vouchers Some restrictions may apply o Monthly invoicing the Partner is invoiced monthly for number of Vouchers issued OBTAINING A ONECLICKSSL SINGLE SITE VOUCHER For Vouchers provisioned by Partners Buy Voucher GlobalSign Host Voucher Provisioning Control Panel GCC API Vendor Deliver Voucher Aggregator Plug in CLI Custom Integration Plug in key generation and automated vetting E E od Voucher Redemption Certificate delivery installation bind to site The above diagram shows the concept of a Voucher being applied for via a Partner to GlobalSign either by GCC or by API The provisioned Voucher is then redeemed at the Control Panel or Server plug in level 13 INITIATE A CERT INVITE This method is significantly simplified and requires you to enter only the contact details of the customer It does not require you to enter their company information or CSR When you create a Cert Invite GlobalSign will generate a unique code specific to the order and give you a PIN We then send an email to the customer containing a link You mus
4. 3 600 00 2 400 00 33 5 7 200 00 4 400 00 38 Example discount pricing Actual pricing may vary Rank 1 is standard Pay As You Go pricing the base discount level In this example to progress to Rank 2 you would need to add 785 to your account thereby automatically giving you a 12 discount over the standard PAYG pricing Once you ve created bulk contracts deposited enough funds to elevate you to a higher Rank you stay on that rank for a 12 month period If you create any further bulk contracts deposit additional funds during the 12 month period the discount period is automatically extended by 12 months In other words as long as you create bulk contracts deposit additional funds before the 12 month period expires you will maintain your current discount rank The process of upgrading your rank and hence discount is automatic alternatively contact your Account Manager and can be completed from within your account as described in the Payment Options Bulk Orders Depositing Funds into Account section of this Quick Start Guide PAYMENT OPTIONS PAY AS YOU GO You may choose to use Unlimited Licensing Pay As You Go PAYG each time you purchase a certificate When using PAYG you will only receive Rank 1 discount levels You have the option to pay in one of three ways Credit Card Bank Transfer monthly invoicing in arrears or Bank Transfer payment upfront UNLIMITED LICENSING This option allows the resel
5. Office documents www globalsign com personalsign e Code Signing Digital IDs for application signing www globalsign com code signing e PDF Signing Certificate for Adobe PDF signing www globalsign com pdf signing PRICING PAYMENT OPTIONS amp BILLING DISCOUNT STRUCTURE amp GETTING THE BEST DISCOUNTS All Partners buy GlobalSign Digital Certificates at a discount You can resell the certificates to your customers through your own website or web services at your desired price and make margin on every certificate you sell Alternatively you could add certificates as a value added offering to your current product packages The higher you sell the certificate or the higher your discount the more margin you make The discount levels are set by the level of funds put into your Account All Partners initially have the default level of discount detailed as Rank 1 in the example table below and receive this discounted pricing every time they purchase a certificate using the Pay As You Go no commitment to methods of payment see Payment Options Pay As You Go section of this Quick Start Guide This means you can buy at a discount without committing any funds to your account however in order to obtain higher discounts you must bulk purchase deposit funds directly into your account Bulk purchase Discount off PAYG Rank PAYG pricing pricing pricing 1 180 00 180 00 0 2 900 00 785 00 12 3 1 800 00 1 250 00 30 4
6. are in the Client Certificates section by clicking the Code Signing PersonalSign PDF Signing for Adobe CDS tab on your GCC landing page CODE SIGNING PERSONALSIGN SSL for PARTNERS amp RETAIL PDF SIGNING for ADOBE CDS fi GCC HOMEPAGE Client Certificates GlobalSign Certificate Center Before placing an order or allowing your customers to place an order please be familiar with the ordering process as detailed below 17 2 Authorize Applicati la Enter Application uthorize Application eee ad amp Choose Payment Details amp Pickup Password lt u m method 1b Enter Application Details amp Pickup Password amp choose Payment method 3 Send Email Challenge only if email is included within Certificate Identity information 5 Vetting of Subscriber 7 Click on Key Generation Vv link and Certificate Install lt n 6 Send Pickup Email link 4 Approve 1A METHOD ALLOWING CUSTOMERS TO ORDER DIRECTLY This method allows your customers to place an order through your Account directly via a unique ordering URL They do not need login access and may only complete the web ordering forms Partners must then authorize the order prior to GlobalSign initiating vetting of the order and ultimately releasing the issued certificate to the customer 1 Share the Customer Ordering URL with your customers either directly or hooked into your web pages You can obtain your unique URL by clicking
7. Click DO NOT APPROVE to reject the order the Certificate WILL NOT be issued Application Details Order ID dev4_PC201009088787 SAAE From support Sgiobsisign com Common Name Lila Kee To Wa kee Sglobaisiqn com o Contact First Name Lila A Subject Order ID devs _PC201009083787 GlobalSign PersonalSign 2 lt Pro gt Approve Applicati Dear Customer Contact Middle Name An application for a PersonalSign 2 lt Pro gt Certificate has been Contact Last Name Kee In order for GlobalSign to issue the Certificate the email add Contact Phone IIIIIIIIII the application Only if you approve the application will the Certificate be iss https 211 11 149 174 ra arrivalMailApproval arrivalMailApprov r 6af51822 amp e 363d91b3a5 amp c d19 d6b9a289423dd91a48366b92aa016 912 Make sure your browser address bar contains the complete unbrok For your information the Applicant has provided the following ContactName Kee Lila A Applicant Email Address lila kee globalsign com If you have any questions about this application please contac Contact Email Organization O Locality L State S Country C Application Email Application Date lila kKee globalsign com GlobalSign Inc Portsmouth NH US lila kKee globalsign com 2010 09 08 15 45 17 653 APPROVE l 1 DO NOT APPROVE Please contact support if you require further assistance Kind Regards GlobalSign Support Team CONTACT US e lf the Client Certificate requir
8. NECLICKSSL OneClickSSL is another GlobalSign innovation designed to help hosting companies automate the entire SSL workflow including e CSR generation e Private key generation e Right to use a domain e Receipt of issued certificate e Installation of certificate and installation of intermediate certificates e Binding of certificate to appropriate website OneClickSSL plug ins are available for a number of control panels and web servers and Voucher provisioning is available through a number of billing platforms Please visit www globalsign com ssl oneclickssl for the latest integration news and downloads For mass deployment of plug ins in your hosting environment contact your Account Manager TYPES OF ONECLICKSSL VOUCHERS Single Site Vouchers Like standard SSL Certificates Single Site Vouchers are provisioned through Partner Accounts or via the GlobalSign retail sales website Partners can obtain Vouchers either via the GlobalSign Voucher API or via their web console GlobalSign Certificate Center or GCC Single Site Vouchers are tied to a specific product order for a specific domain on the GlobalSign system essentially a product configuration such as a 3 year DomainSSL certificate for www domain com Single Site Vouchers can only be redeemed once if they are re entered into the OneClickSSL plug in it will reissue the certificate with an unchanged expiration date Single Site Vouchers are designed to be redeemed by the end
9. Start Guide Alternatively you may use one of the Pay As You Go payment methods see the Payment Options Pay As You Go section of this Quick Start Guide b Bank Transfer i Payment in Advance Select for an invoice to automatically appear in the Accounting Billing gt View Request Invoices section that can be printed and submitted to your purchasing department GlobalSign will only issue the certificate once the funds are transferred by your purchasing department directly to the GlobalSign bank account ii Payment in Arrears Select to request the deposit amount funds are settled within the standard payment terms At the end of the calendar month an invoice will automatically appear in the Accounting Billing gt View Request Invoices section Once you have settled the invoice your credit limit will return to the previous limit level c Credit Card you will be asked to provide credit card details to be charged before the certificate can be issued The credit card is charged automatically at the point of issuance Note depending on your territory and account type not all payment types will be available ADDING SUBJECT ALTERNATIVE NAMES SANS Standard SSL Certificates secure a single Fully Qualified Domain Name By adding SANs a single certificate can secure other server names such as other domain names subdomains IP addresses and local host names If selected you will enter the SANs on the SANs page and the to
10. Technical Resources GlobalSign Partners Digital Certificate Reseller Quick Start Guide Using your GCC Partner Account to Resell SSL amp Client Certificates Effectively v2 4 Re m O GlobalSign TABLE OF CONTENTS POS CINE lilt E AET AE E E APN E cia E A secon anus N A E A E E E T A EE 4 PVD PrOdUCIS casera cecascteceanaicaneticute EEEE EE EEEE A EES AER EESE EEES EE TaY 4 SCU 0S ae a A A E E E E atattateanpeneonee 4 Saa e VOICI e a A E E A A E E E E E E A AA A A E A E E E 4 aea CO E AE E E A E NE E E E EE A E E E E 4 Pricing Payment Options amp Billing sposcecarea ce sanctisesys csteea conned inn sauna oneslassne cetsun eye atte eaenpronnedurensncouerieanen saeunronasdunnes yeoanenteansaseuupevaneets 5 Discount Structure amp Getting The Best DISCOUNTS scssssicsscsassivcacossineasnscanvansuesonsusecscassancdooanvsarseneanssedeosdneeieciocusavansadeenvaeeneses 5 Payment opion ray AS YOU GO icerisine E E OE EESE E EEE 6 H ECEE a E T E A E 6 Pay AS You Go Payment by Credit Card siscdsccusaicisnsszeenecccciecesan denen aS A EN S E NE 6 Pay As You Go Payment by Monthly Invoicing cccccccssssecccecceesececcceeseccccseeseeeecseseaseceesseasecesseuaaeceessuaaneeeessaansses 6 Pay AS YOU Go Payment Upfront sivscids cei cosnsioswnsadsnewsyessinvadeavsdesncoaw sa dceasssansdud dane tesiessboncehdvandersenntdasuoteawsyevnethoearseuwsienesears 6 Payment Options Bulk Orders Depositing Funds into ACCOUNL
11. ace ogntee seoeesesar ce 15 Cancelling an Orde csaccicccesarscausascusatwseseennadecas qin danse asancaboasiunntadeskonnsdasssssaventesauceseneaagennedaauepucwoutevan cose eansee pa peadeagonnedaaseoarse 15 RE SEMAINE an Approver Email eancaccsansancatecnenccwacaudanenaeviencieetantamecvranvaceuinadinenedieSactineanineiaeenahaaitansnaetneneaagranndaewtauneraeesanmensat 15 Reiss ing am SSL Certificate ianen sues seeseooneaessnes nneuussciancumianodearanaaeucosdesesaicaguene E S TNE 16 Renewine aM SoL COP CNC AGS sissioni sanina EO aE E N SAE NAE E Ri 16 Revoking an SSL or Client Cr ECA et apcssacctocsasassocdaaduncnenseaurardestonoansioecanaitsauscadeantad arsannexoesasnictousseadannsubeaiaanaznedsantinesannaatent 17 orderne lenmt Cer Cates x secu tacciate nace rushes AE E uatan ce anes nian syomee toaramncteaban cr saaancnasvatan toate weecen acca voncaeae 17 1a Method Allowing Customers to Order Directly cccccccccssssseecceccececeeesseeccceeeaeeeseeccecceeeeeegeseceeeeeeaeageseeeeeeeseeaganes 18 1b Method Ordering on Behalf Of a Customer cccsssseccccccccsceesseecccceeeauessecccececsuusesseeecceseeauesseeeceeeesagassseeeeeeeeeaaaees 20 Essential VWVOPKTIOW POINTS to NOUC renueni iea E veetalesuendimscatlavvasseRacngeabanncncurns 22 Managing Existing Customers Client Certificate Applications cccccsssccccccssssecceccseseccecseeseccccsaeaceeeessuaseceeseuaaeeeesaaaaeeess 22 Viewing Outstanding amp Completed Orde Si
12. and then the Complete button to commit the change Note Once a Cert Invite PIN is voided it cannot be reactivated You will not be charged for voiding any Cert Invite PINs CANCELLING AN ORDER If you wish to cancel a completed order you may do so automatically within the 7 day refund period Depending on how you paid for the certificate cancelled orders automatically refund the appropriate amount of credit to deposit accounts directly refund credit cards or cancel outstanding invoices To cancel an order Click Order History amp Certificate Renewals in the SSL Certificate Management section Search for the appropriate order and click the Edit button Click the Cancel Order button at the very top or very button of your screen Review the order details to verify the order is the correct application to cancel scroll to the bottom of the page and click the Confirm button oe i i RESENDING AN APPROVER EMAIL If your customer has not received the Approver Email or has deleted spam filtered the email by mistake you can automatically resend the Approver Email 1 Click Order History amp Certificate Renewals under SSL Certificate Management 2 Search for the appropriate order and click the Edit button 3 Click the Resend Approval Mail button located at the very top and very bottom of the screen 15 4 Confirm that the Approval Email address is correct and click the Resend button REISSUING AN SSL CERTIFICATE If your custom
13. ccount You have the choice of three payment types to settle the deposit amount e Bank Transfer Advanced Payment Select for an invoice to automatically appear in the Accounting Billing gt View Request Invoices section that can be printed and submitted to your purchasing department GlobalSign will only add the deposit amount funds to the account once the funds are transferred by your purchasing department directly to the GlobalSign bank account e Bank Transfer Post Payment PO Payment Select to request the deposit amount funds are settled within the standard payment terms GlobalSign must authorize the credit level deposit amount funds before the funds can be used At the end of the calendar month an invoice will automatically appear in the Accounting Billing gt View Request Invoices section e Credit Card You will be asked to provide credit card details to be charged before the Deposit amount is added The credit card is charged immediately When buying certificates using the funds you have deposited make sure to select Deposit as the Payment Option at the payment point when ordering certificates ORDERING SSL CERTIFICATES When you are ready to order an SSL Certificate on behalf of a customer you have two methods of placing an order You can place the order yourself by completing a full application or you can create a Cert Invite Make sure that you are in the SSL Reseller section by clicking the SSL for Partners am
14. ctual customer but only do this if you want GlobalSign to send the SSL Certificate and Certificate Renewal Notices directly to your customer e Note GlobalSign does not include any pricing information in any communications with your end customer e Note Check the box Set Point of Contact to have the SSL Certificate and Certificate Renewal Notices sent to User you have just specified If you do not check this box the SSL Certificate will only be sent to you e Note You may specify an additional 2 contact to just receive the Issued Certificate and Renewal Notices if you wish 4 On the Product Application CSR Entry Page copy and paste the CSR Certificate Signing Request into the text box The CSR will be decoded and you will be given the option to fix any errors manually Enter Certificate Signing Request CSR if you have a CSR please complete the section below If you do not have a CSR or do not know how to create one on your web server don t worry just choose one of the alternative methods below Yes already have a CSR and will paste it into the input box below default New do not have a CSR so will use the OneClickSSL delivery method requires use of OneClickSSL plug in or install tool more After creating your server s Certificate Signing Request CSR as created in Generate a CSR support O files paste the CSR in the form below Make sure that it contains the complete header and footer BEGIN and END l
15. customer server admin Supervouchers Supervouchers are issued by GlobalSign to Partners Partners cannot create Supervouchers directly Supervouchers allow a host to reuse the same voucher multiple times and can be restricted by number of redemptions time period and platform or permitted IP range Supervouchers are tied to a specific partner account for a specific product type and validity period on the GlobalSign system Supervouchers are designed to be redeemed on behalf of the end customer server admin and allow the hosting company to push the Voucher to the plug in automating the redemption and hence SSL activation They should not be made public and are best used programmatically or internally by hosting companies 12 Trial Vouchers Trial Vouchers are identical to Supervouchers in terms of provisioning and customizable restrictions but are tied to GlobalSign s trial product range of short term certificate validity periods such as 30 day DomainSSL Certificates PAYMENT FOR ONECLICKSSL VOUCHERS GlobalSign offers many ways for Partners to pay for Vouchers Typically the cost of the Voucher will depend upon the quantity or deal in place with the Partner Note there is no fee for the use of Trial Vouchers e Single Site Vouchers o Pay As You Go a credit card is held on file and charged when a Voucher is issued o Bulk deposit a deposit into the account is made and debited to the value of the Voucher when a Voucher is issued
16. d 1 3 years No pricing will be displayed unlike when you apply on their behalf b Select if the customer has an externally generated CSR This is very rare and in most cases they should leave this blank Please note this option is only available when ordering CodeSigning for Multi platforms c Select if the customer wishes to use the PKCS 12 option This option tells GlobalSign to generate the cryptographic key pair on the customer s behalf This avoids having to use the browser to generate the key pair later in the process or if your customer is having browser issues 3 Enter the Certificate Identity Details These details will be vetted They must be the Subscriber s end customer to whom GlobalSign issues the certificate This is the information that will be included in the Certificate a Complete the identity details b Remember the pickup password If the password is lost or forgotten the application must be made again from the beginning 4 Enter the Subscriber Details The Subscriber is the person or organization to which the certificate will be issued These details will be needed for vetting and possibly authorization purposes 5 Confirm the application details and review the Subscriber Agreement You as the Partner will be alerted via email when a new order has been placed You must now complete the following 1 Log into your GCC account and go to the Code Signing PersonalSign PDF Signing for Adobe CDS tab 2 Click o
17. e report or enter the Common Name or Order ID and cli Quick Access Reports Detailed Custom Reports Upcoming Renewals R port Incomplete Orders R port Specific Order Certificate Order Number Common Name All Orders Application Date All 16 REVOKING AN SSL OR CLIENT CERTIFICATE Revocation should only be used when key material private key has been compromised and the identity of the certificate holder could be stolen Lost certificates need not be revoked Revocation will add the serial number of the certificate to the GlobalSign Certificate Revocation Lists CRLs and such lists are downloaded by browsers and applications to warn users about the revocation of the certificate if they encounter it for example a signed email or document or a https session with a website e Torevoke an SSL Certificate log into your Partner account locate the order via the Reporting facility click Edit and click Revoke e To revoke a Client Certificate you must contact GlobalSign Partners are not permitted to directly revoke Client Certificates GlobalSign will need to ascertain the reason for revocation with the end customer directly and document their confirmed approval to revoke ORDERING CLIENT CERTIFICATES Partners have two methods of ordering Client Certificates through their GCC account the Partner completes the application on behalf of the customer or the customer completes his her own application Make sure that you
18. ed Certificate orders that are placed by Users who do not have Certificate Approval Permission will be placed into the Pending Certificate Approvals section under Certificate Management Note all users can place orders only users with Certificate Approval Permission can place orders that do not need to be approved by users with Certificate Approval Permission e Deposit Purchase Authority o Set to True if you wish the User to be able to deposit funds into the account o Set to False if you do not wish the User to be able to deposit funds into the account GLOBALSIGN SSL API Contact your Account Manager for further details on how to use the GlobalSign SSL APIs and web services The XML based API allows you to place orders and reports on issued certificates The API may be integrated into websites control panels and third party web services and replaces the need for partners to conduct all SSL reselling through GCC The AJAX API allows you to run a web based app to automate the application of SSL Certificates CREATING SECOND TIER SUB RESELLERS GlobalSign Partners can create and manage their own set of second tier sub resellers SSL only allowing a multi level reseller chain You can sign up set pricing manage and report on your own sub resellers giving them all the benefits you enjoy through partnering with GlobalSign For further details on creating Sub Resellers contact your Account Manager GETTING HELP Every GlobalSign Part
19. er needs a certificate reissued because they have deleted or lost their certificate and corresponding Private Key you can reissue any issued certificates directly Click Order History amp Certificate Renewals under SSL Certificate Management Search for the appropriate order and click the Edit button Click the Reissue button located at the very top or very bottom of the page You will be prompted for a new Certificate Signing Request Note the reissued certificate will only be valid for the i period remaining on the initial certificate RENEWING AN SSL CERTIFICATE GlobalSign will begin sending Renewal Notices 90 days prior to the expiration of the certificate We will send the notices to the contact associated with the order which by default will be one of the Users associated with the Partner account or if specified during the application the end customers themselves For added convenience certificates within the renewal range 90 days prior to expiration will be listed on the home screen of the SSL for Partners amp Retail tab Simply click the Renew button next to the appropriate order to begin the renewal process You can also view upcoming Renewals by going to the Order History amp Upcoming Renewals link and running the Upcoming Renewals report on the Quick Access Reports tab Reporting Run reports or search for specific orders To Reissue Cancel Renew or Revoke a specific Certificate or action o run an appropriat
20. ers automatically refund the appropriate amount of credit to deposit accounts directly refund credit cards or cancel outstanding invoices To cancel an order 1 While on the Code Signing PersonalSign PDF Signing for Adobe CDS tab in your GCC account click Order History under Reporting Search for the appropriate order and click the Edit button 3 Click the Cancellation Request button located at both the very top and very bottom of the Certificate Edit screen Check the order is the correct application to cancel scroll to the bottom of the page and click the Confirm button RESENDING AN APPROVER EMAIL FOR APPROPRIATE CLIENT CERTIFICATES If your customer has not received the Approver Email or has deleted spam filtered the email by mistake you can automatically resend the Approver Email 1 While on the Code Signing PersonalSign PDF Signing for Adobe CDS tab in your GCC account click Order History under Reporting Search for the appropriate order and click the Edit button 3 Click the Resend Approval Mail button located at both the very top and very bottom of the Certificate Edit screen 4 Check the order is the correct application to resend the Approver email scroll to the bottom of the page again and click the Complete button Stomer Cannot receive the approver ema at the addre 23 REISSUING A CLIENT CERTIFICATE If your customer needs a certificate reissued because they have deleted or lost their certificate and corres
21. es vetting such as PersonalSign 2 PersonalSign 2 Pro PersonalSign 2 Department Code Signing or any of the PDF Signing Certificate products the certificate will not be released for pickup until vetting is complete GlobalSign will automatically send a Pickup Email to the Subscriber when the certificate application has been vetted e The certificate is issued when the certificate pickup link contained within the Pickup Email is followed and the Pickup Password is entered into the page MANAGING EXISTING CUSTOMERS CLIENT CERTIFICATE APPLICATIONS VIEWING OUTSTANDING amp COMPLETED ORDERS While on the Code Signing PersonalSign PDF Signing for Adobe CDS tab in your GCC account click Order History in the Reporting section to open the search function for viewing all certificate applications Use the Order Status dropdown to 22 select the Order Status you want to use as a filter e g Use the Order Status Issue Completed to view all completed and issued orders Certificate List Please Click Search Button Date of application 9 12 25 2010 Issue Date 9 12 25 2010 Common Name Email Address Order ID Alphanumeric Character Product All x Order Status All x Certificate Status All x Contractor User Display Number 10 x CANCELLING AN ORDER If you wish to cancel a completed order you may do so automatically within the 7 day refund period Depending on how you paid for the certificate cancelled ord
22. es you the best discounts To be able to pay for certificates using deposited funds you must first deposit funds into your account by clicking Create Bulk Order or Add Deposit in the Financial Management section Financial Management Create Bulk Order Add Deposit CREATE BULK ORDER This section allows to you add the exact funds required for a particular order Click Create Bulk Order under Financial Management and select the product validity period and options and click Add Repeat until you have added all the products you require for a particular order As you add products the total Deposit needed will be added up If the total Deposit needed exceeds a Rank Level you will be promoted to the next Rank Level where you will enjoy higher discounts Number Validity of Server Period License Blocks Delete Product Certificate Type Order Type E OrganizationSSL Wildcard SSL New 2 years 1 E OrganizationSSL Standard vy New vy 2yearssv 1 v ADD DEPOSIT Click Add Deposit under Financial Management and enter the specific amount of funds you wish to add to your account If the total Deposit needed exceeds a Rank Level you will be promoted to the next Rank Level where you will enjoy higher discounts a Account Balance 2 951 20 Deposit money 5000 HOW TO PAY FOR YOUR BULK ORDER ADD DEPOSIT AMOUNT Complete either a Create Bulk Order or Add Deposit as detailed above and click Purchase to add the funds to your a
23. g the Partner Signup User ID PAR00937_000 x Your User ID assigned during e g PP tadmin enrollment Password eeeeeeeoeoeoe oo Your Password selected during enrollment If you have difficulties logging in or forget your password please contact Support at www globalsign com su AVAILABLE PRODUCTS SSL CERTIFICATES SSL Certificates encrypt the connection between server and browser or between web services using https Reselling SSL is ideal for any company providing web services such as hosting ecommerce services domain sales etc For more details on SSL visit www globalsign com ssl ONECLICKSSL VOUCHERS OneClickSSL Vouchers can be redeemed by OneClickSSL plug ins for cPanel Parallels Plesk IIS and Apache OneClickSSL enables hosting companies to replace the traditional SSL lifecycle process with a fully automated and significantly simplified SSL activation process More details are available at http www globalsign com ssl oneclickssl CLIENT CERTIFICATES Client Certificates are the group name given to Digital Certificates issued to people or companies for the specific use of email security authentication to online resources and application of digital signatures to applications code and electronic documents Adobe PDF and Microsoft Office files For more details on Client Certificates please visit e PersonalSign Digital IDs for email signing and encryption two factor authentication and digital signatures for Microsoft
24. ht option ensures you get the best deal If you are switching from a competitor we will automatically query the site holding the competitor s certificate and add any time left on that certificate to the replacement If we cannot automatically find the competitor s certificate online you have the opportunity to manually copy and paste the certificate into a text box Are you switching from a Competitor No am not switching Yes am switching If you choose Yes you may choose that 30 addition bonus days are added to the expiration date free of charge h Select whether it s a New Certificate order or Renewal If renewing you must enter the original Order Number or Certificate to help us expedite the renewal process Are you renewing this Certificate No Yes Enter either the Order No or the original Certificate you are renewing to identify the order renewal information Original Order No Original Certificate On the Product Point of Contact for Certificate Delivery Vetting Issues page enter the details of the person to be associated with the order The person entered here can receive the actual SSL Certificate and the Certificate Renewal Notices If you have registered other Users for the account you can select the User from the drop down list and click Auto Fill see section Creating Managing Users to avoid filling in this form for every order Alternatively you can specify new contact details for example the a
25. ines as shown in the example MIIDYTCCASOCAQAWGYUXHIJACBGNVBAMTFXdSdy5 3 ZXJ0YXVOaG9yaXRSLaNvbTED MBKGAILUECXMSVGVzY2huaWNnDCBIdGXBwo3 JOMRYwFAYDVQQKEw1HDG91 YWxTavdu IFVLMRIWEAYDVQQHEWINYW1 kcS3RvbmUxDIALBgGNVBA EctibnQxCzAJBgNVBAYT AKGCMIGIMADGCSGGS IDS DQEBAQUAAIGNADCB1iQKS QDxwiny PBISEUGuj3SQzVpeLfH RZ4cVSJOERKZCDFS9d tYgYJTC8suSxOGVREC 4SHKcv4WOpiI ric7 CxXigz ngatGgNzZRiGNclLAHIAbwiwna 7 FwOQsriRkidg hy 4AzzewWLNDqiHleEnSWvPRbD CPbrORADTO4QS44taromOv DAGABOTTERTAABGDrOGEEAY 20QIDMDAC UumMS4y NJAWL3 IwewYKKWYBBAGCNWIBD FUMGs IADW4AQH BAQDAGTWMEQGCSQGSIb3 maparen eaa paea akoa HBgUrDgMC BZAKBggqnkiG9wODBZATBgNVHSU GGXrBoEFBQcDATCB QYKKwYBBAGCNWOC A GB7 JCBEwWIBARSSAEOAAaQB IA WB ZAGSAZQGBOACAAUGBIAEEAIABIAEMAAABNH AG 4angBLAGWAEABDAH ACG ANDREA BSAHEAYDWAGoAAG ACARIAB AGERGG AGQAZQBYAIGIJAD arene mt SoFKMmmDDuOCenA Wa Am loT4HsX4zj3uasD HtaAzk2i snAHIADWRvi VUHKLU IVIUMKXPqhm MVBE6cQqJIa4TedO DxvV XDBSJUrIk amp JEqkps ae PIyNyhtx04McBbaPKGZSvh PmOKLIVAAAAAAAA AAAWDQOYIUKOZInvcN QADGYEAI GgvWuAT4 2pOauAHIADwOOvgasOoTODYs opt FQOSwtEo6koZ7 6FDdAENnoL 3 74URXIDNCKOXE4c4bDOhiScdnms 7RqffFRIEeBIEMKP VVK7 OLSnOQmgKOLW IN dK 6 0LnQauLlswSDSpvdgSrd7gusFz2KwWsmyYlatz eqi0758 rNKWPUE END NEW CERTIFICATE REQUESTI For AlphaSSL and DomainSSL you have two CSR related options e Enter CSR copy and paste the Certificate Signing Request created on the customer s web server into the box e Use OneClickSSL if your custome
26. ler to resell an unlimited number of certificates during the term of the agreement Unlimited Licensing is only available by speaking directly to your Account Manager PAY AS YOU GO PAYMENT BY CREDIT CARD Each certificate is paid for by Credit Card in real time at the point of the certificate being issued If you want to use Credit Card PAYG to buy a certificate make sure to select Credit Card as the Payment Option at the payment point when ordering certificates Note you receive PAYG pricing Rank 1 when buying certificates using this method PAY AS YOU GO PAYMENT BY MONTHLY INVOICING GlobalSign awards you a credit level as agreed with your Account Manager and you can buy as many certificates using the credit you have on account At the end of the month GlobalSign will invoice you for all certificates issued during the calendar month If you wish to be invoiced monthly select Bank Transfer Payment in Arrears as the Payment Option at the payment point when ordering certificates Note you receive PAYG pricing Rank 1 when buying certificates using this method PAY AS YOU GO PAYMENT UPFRONT GlobalSign will only add the deposit amount funds to the account once the funds are transferred by your purchasing department directly to the GlobalSign bank account Note you receive PAYG pricing Rank 1 when buying certificates using this method PAYMENT OPTIONS BULK ORDERS DEPOSITING FUNDS INTO ACCOUNT Using the Deposit Funds option giv
27. ls These details will be vetted They must be the Subscriber s end customer to whom GlobalSign issues the certificate This is the information that will be included in the Certificate a b Complete the identity details Remember the pickup password This must be communicated by the Partner to the Subscriber out of bands i e GlobalSign will never communicate this password to anyone Partner or Subscriber If the password is lost or forgotten the application must be made again from the beginning 5 Enter the Subscriber Details The Subscriber is the person or organization to which the certificate will be issued These details will be needed for vetting and possibly authorization purposes 6 Choose your payment method d Deposit the fee for the certificate will be deducted from your Deposit balance see the Payment Options Bulk Orders Depositing Funds into Account section of this Quick Start Guide Alternatively you may use one of the Pay As You Go payment methods see the Payment Options Pay As You Go section of this Quick Start Guide b C Bank Transfer i Payment in Advance Select for an invoice to automatically appear in the Accounting Billing gt View Request Invoices section that can be printed and submitted to your purchasing department GlobalSign will only issue the certificate once the funds are transferred by your purchasing department directly to the GlobalSign bank account ii Pa
28. n Pending Certificate Approvals 19 Client Certificates New Certificate Pending Certificate Approvals Customer Ordering URL 3 Select the order choose to Approve or Reject a If you reject the application will be cancelled b If you accept you will be taken to the payment selection method 4 Choose your payment method a Deposit the fee for the Certificate will be deducted from your Deposit balance see the Payment Options Bulk Orders Depositing Funds into Account section of this Quick Start Guide Alternatively you may use one of the Pay As You Go payment methods see the Payment Options Pay As You Go section of this Quick Start Guide a Bank Transfer i Payment in Advance Select for an invoice to automatically appear in the Accounting Billing gt View Request Invoices section that can be printed and submitted to your purchasing department GlobalSign will only issue the Certificate once the funds are transferred by your purchasing department directly to the GlobalSign bank account ii Payment in Arrears Select to request the deposit amount funds are settled within the standard payment terms At the end of the calendar month an invoice will automatically appear in the Accounting Billing gt View Request Invoices section Once you have settled the invoice your credit limit will return to the previous limit level b Credit Card you will be asked to provide credit card details t
29. ner has a dedicated Account Manager who is on hand to help with any commercial and technical queries you may have about reselling SSL GlobalSign also provides technical support through our Client Service departments around the world www globalsign com su GlobalSign Americas GlobalSign EU GlobalSign UK Tel 1 877 775 4562 Tel 32 16 891900 Tel 44 1622 766766 www globalsign com www globalsign eu www globalsign co uk sales us globalsign com sales globalsign com sales globalsign com GlobalSign FR GlobalSign DE GlobalSign NL Tel 33 1 82 88 01 24 Tel 49 30 8878 9310 Tel 31 20 8908021 www globalsign fr www globalsign de www globalsign nl ventes globalsign com verkauf globalsign com verkoop globalsign com A A I EEEE A A E EE E EE AEE E O OO O E OE O EN N 25
30. newals in the SSL Certificate Management section to run reports or search for specific orders From this page you can choose from several pre configured reports e g Upcoming Renewals Incomplete Orders on the Quick Access Reports tab or you can click the Detailed Custom Reports tab to run reports with more advanced filters To run a report based on Order Status you will need to use the Detailed Custom Reports tab Click the Detailed Custom Reports tab and use the Order Status dropdown to select the Order Status you want to use as a filter Click the Search button A list of certificates with the selected Order Status will appear at the bottom of your screen 14 Quick Access Reports Detailed Custom Reports Display Number 10 x Product All y Application Date E E Order Status Order received Issue Date E E GCC User Anyone Expiration Date 5 E Search Reset For Cert Invite applications Cert Invite Management in the SSL Certificate Management section This page allows you to search for Cert Invites given certain criteria PIN Number Order ID i Service A Issue Date E 5 PIN Status Notused Display Number 10 x Search Reset CANCELLING A CERT INVITE PIN If you wish to cancel a Cert Invite PIN click Cert Invite Management and search for the order Click the Edit button next to appropriate Cert Invite application and change the PIN Status from Unused to Void Click the Confirm button
31. o be charged before the Certificate can be issued The credit card is charged automatically at the point of issuance Note depending on your territory and account type not all payment types will be available 1B METHOD ORDERING ON BEHALF OF A CUSTOMER This method requires the Partner to complete the required web forms on behalf of the customer 1 While on the Code Signing PersonalSign PDF Signing for Adobe CDS tab click New Certificate in the Client Certificates section of the left navigation menu 2 On the Certificate Type selection page select the Client Certificate type PersonalSign Code Signing or PDF Signing Certificate 20 3 You will then enter the application flow the specific product type For this example we will follow the application flow for Code Signing a b C Select the validity period 1 3 years If you have any promotional codes from GlobalSign enter them here Select if the customer has provided you with an externally generated CSR This is very rare and in most cases you should leave this blank Please note this option is only available when ordering Code Signing for Multi platforms Select if you wish to use the PKCS 12 option This option tells GlobalSign to generate the cryptographic key pair on your customer s behalf This avoids having to use the browser to generate the key pair later in the process or if your customer is having browser issues 4 Enter the Certificate Identity Detai
32. on the Customer Ordering URL within the Client Certificates section of your GCC account located on the Code Signing PersonalSign PDF Signing for Adobe CDS tab fi GCC HOMEPAGE Client Certificates New Certificate Pending Certificate Approvals Customer Ordering URL A brief explanation of usage and the actual URL will be displayed Customer Ordering URL https dev4gacp globalsign co jp pc public certificate portalneworder do URL p zYV50UewUD 2F 4yuhcdSw 78A 3D 3D The Customer Ordering URL is a unique link that allows customers to directly apply for Client Certificates Partners must approve each application prior to the Certificate being issued When applications are complete your Adminisrator will be alerted via Email and you must Approve or Reject the application using the Pending Certificate Approvals link Please note that you must still obtain payment from customers through your own workflows GlobalSign assumes that you have or will obtain payment from your own customer when you Approve applications When a customer clicks on the Ordering URL they will enter the below application process 1 On the certificate type selection page select the Client Certificate type PersonalSign Code Signing or PDF Signing Certificate 2 They will then enter the application flow the specific product type For this example we will follow the application flow for Code Signing a Select the validity perio
33. p Retail Tab on your GCC landing page GlobalSign GMO internet Group f cccHomePacE CODE SIGNING PERSONALSIGN SSL for PARTNERS amp RETAIL PDF SIGNING FOR ADOBE PDF GlobalSign Certificate Center COMPLETE A FULL APPLICATION This method requires you to enter all the information needed to issue the SSL Certificate including the CSR and company information 1 Click Buy New Certificate on the landing page dashboard 2 On the Certificate Application page specify the order details a In Products select the SSL Certificate type AlphaSSL DomainSSL OrganizationSSL or ExtendedSSL Products AlphaSSL DomainSSL OrganizationSSL ExtendedSSL b If you have any promotional codes from GlobalSign enter them next c Specify if the SSL Certificate is Single Domain or will any Wildcard SSL AlphaSSL DomainSSL or OrganizationSSL only or Public IP options OrganizationSSL only d Specify the validity period 1 5 years for AlphaSSL DomainSSL and OrganizationSSL and 1 2 years for ExtendedSSL e Specify whether the certificate is to have free Unified Communications support for the OWA mail and Autodiscover subdomains DomainSSL OrganizationSSL and ExtendedSSL only f Specify whether the certificate is to have Subject Alternative Name SAN options see below for further details on SANs DomainSSL OrganizationSSL and ExtendedSSL only g Select whether you are Switching from a Competitor Selecting the rig
34. ponding Private Key you can initiate a reissue for any issued certificates directly 1 While on the Code Signing PersonalSign PDF Signing for Adobe CDS tab in your GCC account click Order History under Reporting 2 Search for the appropriate order and click the Edit button Click the Reissue button located at the very top and very bottom of the Certificate Edit screen A new pickup link will be sent to the Subscriber RENEWING A CLIENT CERTIFICATE GlobalSign will begin sending Renewal Notices 90 days prior to the expiration of the certificate We will send the notices to the contact associated with the order which by default will be one of the Users associated with the Partner account or if specified during the application the end customer themselves For added convenience certificates within the renewal range 90 days prior to expiration will be listed on the home screen of the Code Signing PersonalSign PDF Signing for CDS tab Simply click the Renew button next to the appropriate order to begin the renewal process You can also renew certificates by going to Order History under the Reporting section searching for the appropriate order and clicking on the Renew button NITE ETEN EO eo eee OA INERENTE REET LY PORA SRR o eat D EET ceeeey PAR ray ee ea PRAT TT E EA E ee oe Cie tee enn GCL aS AEG AA aa pe VOU renew a customer s certificate be Ore it expires We 2AA any emalning me onto certificate and give you the Option OT an ex
35. r is using a OneClickSSL plug in for cPanel Parallels Plesk IIS or Apache you can use this function to create a redeemable OneClickSSL Voucher Rather than the system providing a Certificate at the end of the application it will provide a OneClickSSL Voucher which is mapped to a particular order 5 If the certificate order is for a DomainSSL you will be taken to the Approver Email page Select the most appropriate email address that GlobalSign can send the Approver Email This email is sent to the WHOIS domain contact or one of the generic email addresses used by domain administrators The email contains a link to Approve the application and unless the link is followed and the APPROVE button is clicked the Certificate will not be issued Note if you do not see an appropriate email address select any and then contact Support for advice on how best to continue 10 6 If the certificate order is for OrganizationSSL you will be taken to the OrganizationSSL Application Seal Profile Information Entry page This page captures the company details of the customer not you the reseller and will be vetted by the appropriate regional GlobalSign vetting team Ensure you enter accurate information to avoid delays in the vetting process 7 Choose your payment method a Deposit the fee for the certificate will be deducted from your Deposit balance see the Payment Options Bulk Orders Depositing Funds into Account section of this Quick
36. senna onevatennaesiveted A 22 Cance oe arra E aaa aa AA A A A 23 Resending an Approver Email for Appropriate Client Certificates cccccccsssseccccenesecececeeseceeeeeesececseeasseceessaeaeeeeseaees 23 REISSUIM Esa Cent Cen ICat C xatcs soacane ice rea a ve paed Gosecusepetad uaa eaGheatera puede dea A 24 Renewing CIENT COLE CA CS Soir oaxang Gece rire a a A 24 PCCOUNE WIGE FUNCEIONIS arnser a 24 SUN ty I GONG occas t ct her rcen tery reuse alta ade atantasates E T ne aeten ae 24 USEF ROLES case cata a sees nas auiasctuniaauidusGeteate Malnaucnas cabunicaercushyaeaauiolnaead uenctee era nsalyeebarceatatneseeayeedsoats 24 Creating New Users and Understanding User Administration Rights ccccccccssssecccceceessecceceeeseceesaeaseceeseeaaeeeeeees 25 Globale mS SEAR mee rer pet nent era eo ce ee ee 25 Creatine Seconda Hier SUD R CSCIICLS marensin mne E nea aeusueeaeeianoadeuauiet O aaa E EE 25 Cetine HelDryosoiie a a a aa 25 LOGGING IN Once your Partner Account has been approved you can log into the GlobalSign Certificate Center GCC and start reselling GlobalSign SSL and Client Certificates straight away Go to www globalsign com and click Log In GlobalSig n Sales 1 877 775 4562 CIF GMO Internet Group Enter your User ID and Password Your User ID is the PARXXXX_xxxxx number given to you at the end of the Partner Signup you can also find it in your Welcome Email Your Password is the password you entered durin
37. t communicate the PIN to the end user yourself typically we would suggest doing this once you have received payment from your customer Making sure you are on the SSL for Partners amp Retail Click New Cert Invite in the SSL Certificate Management section On the Certificate Application page specify the order details a In Products select the SSL Certificate type AlphaSSL DomainSSL OrganizationSSL or ExtendedSSL b Specify if the SSL Certificate is to have any wildcard public IP or Subject Alternative Name SAN options c Specify the validity period 1 5 years for DomainSSL and OrganizationSSL and 1 2 years for ExtendedSSL d Specify if you are switching from a competitor or renewing the certificate On the New Cert Invite page specify the Cert invite recipient details These are the details of the customer who will be emailed an invitation to complete the SSL Certificate application process Make sure the customer s email address is in the Destination Email Address field Next you will be asked to confirm the application details you provided and review GlobalSign s Subscriber Agreement Click Complete and you will be presented with the PIN associated with that Cert Invite application Make sure your customer is given this to be able to proceed with the application MANAGING EXISTING CUSTOMERS SSL CERTIFICATE APPLICATIONS VIEWING OUTSTANDING amp COMPLETED ORDERS 1 Click Order History amp Certificate Re
38. tal cost of the certificate is then calculated You may specify up to 40 SANs per certificate The types of SANs allowed depends on the certificate type e DomainSSL Unified Communications option or Subdomains e OrganizationSSL Unified Communications option Subdomains Internal Hostnames or Internal IP Addresses different Fully Qualified Domain Names and Public IP Addresses e ExtendedSSL Unified Communications option Subdomains and different Fully Qualified Domain Names 11 Add specific Subject Alternative Names SANs Your Certificate will be issued to a specific Domain Name When you buy a Certificate for www yourdomain com we give you yourdomain com as a free SAN If you want to add further SANs and secure multiple sites servers or IP addresses with a single Certificate select Yes and enter the number of each SANs type you will add to the Certificate No Yes Add multiple domain names Secure multiple Domain Names they can be different to the 0 at 83 each Domain Names you will specify in the CSR AutoCSR Add multiple subdomains Secure subdomains of the Domain Name you willl specify in 0 at 542 each he CSR AutoCSR Add multiple public IP addresses Add Public IP Addresses must be publicly accessible and 0 l at 33 each owned by the applicant organization Add multiple internal server names or internal IP addresses 0 v at SOeach Add internal Addresses such as 10 10 10 01 or localhost USING O
39. yment in Arrears Select to request the deposit amount funds are settled within the standard payment terms At the end of the calendar month an invoice will automatically appear in the Accounting Billing gt View Request Invoices section Once you have settled the invoice your credit limit will return to the previous limit level Credit Card you will be asked to provide credit card details to be charged before the certificate can be issued The credit card is charged automatically at the point of issuance Note depending on your territory and account type not all payment types will be available 7 Confirm the application details The customer s email address you included in the application will receive an email the application has been placed 21 8 Once the information included in the application has been verified by our Vetting Team an email will be sent to the email address you included in the application with instructions for picking up the certificate ESSENTIAL WORKFLOW POINTS TO NOTE e fan email address has been entered into the Certificate Identity Details section GlobalSign will send an Approval Email to the email address entered Unless the Applicant approves the order the order will not be processed Clicking the link in the email will open an Approve Application web page containing an Approve or Reject button Please review the Applicant details below and then Click I APPROVE to authorize the order or
Download Pdf Manuals
Related Search