MSSL user guide
Contents
1. AGREE TO THE SUBSCRIBER AGREEMENT 24 Click on the Download My Certificate button to download the Client Certificate Global GMO Internet Wi i Install your Digital Certificate and the Intermediate CA Certificates Your Certificate has been generated click the Download My Certificate button to download the Certificate onto your computer We have detected that you are not using Internet Explorer Please follow the below instructions to download your Certificate Click the Download My Certificate button to download your Certificate Download My Certificate The Certificate Import Wizard will start when you open the pfx document Simply follow the steps by clicking Next button On the second step you will have to enter the Private Key password you created earlier and you will also be given the choice to select whether or not you wish the key to be exportable Certificate Import Wizard Password To maintain security the private key was protected with a password Type the password for the private key Password Enable strong private key protection You will be prompted every time the private is used by an application if you enable this option Mark this key as exportable This will allow you to back up or transport your keys at a later time Include all extended properties Learn more about protecting private keys 25 At the end of2. You will be asked to enter a secure password for the Client certificate and it will be used to pick up the Client Certificate later on ACCOUNT amp FINANCE gt SSL CERTIFICATES d CODE SIGN PERSONAL SIGN MANAGED SSL PDF SIGN for ADOBE CDs ENTERPRISE d MSSL Home Create A Client Authentication Certificate Password MY CERTIFICATES Request Client Authentication Certificate Access MSSL Account Confirm Certificate Password Please create a secure password for your client certificate You will need this when you pick up the certificate and when you install it via your browser 22 Once you have entered acceptable password for the client certificate you will receive a confirmation message that you have completed the Client Certificate request and you will receive an email with a link for picking up the Client Certificate MANAGED SSL CODE SIGN PERSONAL SIGN ENTERPRISE PKI PDF SIGN for ADOBE CDS ACCOUNT 8 FINANCE gt SSL CERTIFICATES 5 MSSL Home Your Client Certificate Request Is Complete MY CERTIFICATES Next you ll receive an email from us It will contain a link to pickup your certificate and instructions for installing it Request Client Authentication Certificate Access MSSL Account Click on the Certificate pick up URL in the email sent to you in order to start installing your certificate File Message Adobe PDF gt gt G
3. 26 4 MANAGING amp REPORTING ON CERTIFICATES AND ORDERS Order information is accessed via the Managed SSL tab of your GCC account 4 1 SEARCHING FORCERTIFICATES Click the Find Order widget of the Managed SSL home screen or Search Order History under the Find Certificates section of the left navigation menu This brings you to your reporting interface to access orders and certificates The default basic search allows you to search by order number or common name Search Order History Show Advanced Search se Search Display Number 10 m Basic Search search by order number or common name Click Show Advanced Search for additional search criteria such as application issue expiration dates user status and product Search Order History Hide Advanced Search Application Date is between m Im and E Any User Le Any Status m Any Product m include SSL Search Advanced Search Options The Include SSL option in the advanced search allows you to search for all managed and non managed SSL Certificates associated with your account On occasion Managed SSL users may place an order through the SSL Certificates tab rather than the Managed 551 tab Checking the Include SSL option will allow you to see any non managed certificates that may have been ordered in the past so you know to renew them under the managed tab in the future 4 1 1 SEARCH RESULTS Clicking Search after defining your search parameters brings
4. 3 FR i 3 D Rues v Y Find Ignore X E ai Pal Meeting 125 FR stephanie g E To Manager gt S Rules Kb Fin EN GA Team E mail Ke Reply amp Delete N OneNote 3 Related amp Junk Delete Reply Reply Forward EU More Mark Follow Translate Zoom All Create New M Adions Unread Up Lg Select Delete Respond Quick Steps 5 Editing Zoom Extra line breaks in this message were removed From support amp globalsign com Sent Fri 14 06 2013 14 40 To Cc Subject ENROLLMENT FOR INVITE MPS2013061417930 PAR89140 StephGallet HOW TO PICK UP amp INSTALL YOUR CERTIFICATE Ge You must complete this process the machine from which you intend to use the Certificate PersonalSign Users Windows 2000 amp XP Users We recommend you use the Internet Explorer browser Windows Vista Users We recommend you use the FireFox browser otherwise additional modification to your security settings will need to be made to use Internet Explorer Please consult the GlobalSign support pages http www globalsign com support index php for special instructions on how to enroll using the Internet Explorer browser PDF Signing Users Windows 2000 amp XP Users You must use the Internet Explorer browser Windows Vista Users You must use the Internet Explorer browser Consult the GlobalSign support pages for a detailed guide on how to enroll for your DocumentsSign Digital ID
5. Subject Alternative SANs Options Validity Period hatfyear d 1 year O 2year 3 year 4 O 5year Switching from a CI Check box to allow Switching from a Competitor Competitor Allows applicant to trade in competitor s Certificate trade ins get further benefits Leave unchecked to set all applications to New Order only Add Authorization Code Add an Authorization Code for access control of Applicants to your POP Note you must share this Code with applicants via out of bands method Payment Choices Payment Method Elicit Strategy Fixed Payment Method Specify When Ordering Allow entry of Credit Cards for immediate charge Submit POP Configuration page e Certificate Type s Please note that it is possible to select more than one of these options if you would like to give the recipient some flexibility or if you do not know the exact details at the time of configuration O Single Domain Certificate is issued to www domain com and will contain domain com in the SAN field and can only be used on that FQDN Wildcard SSL Certificate is issued to domain com and can secure all sub domains of domain com across your entire server farm Public IP Address SSL Certificate is issued to an IP address that is accessible over the internet and will take the form of XXX XXX XXX XX for example 217 123 236 37 Subject Alternative SANs Options will allow you to configure any SANs that you req
6. 6 6 2 27 EDIT USERS Click Edit next to the user you would like to modify From here you can reset passwords privilege levels status and contact information User information editing page a User ID PARD5988 glaohal88 u Password s Password confirmation a Organization Name Globalsign Inc a Department e g Marketing a First Name Test Middle Name Last Name User Modify user information 6 6 2 5 CHANGE ADMINISTRATOR Click Change Administrator under the My Account section to promote another user within the account to the administrator level Please note the user must already exist before you can make him her an Administrator 6 6 2 4 CHANGE BILLING MANAGER There is only one Billing Manager per account Click Change Billing Manager under the My Finances section to make another account user the dedicated billing contact This ensures the correct person receives invoice notices 39 7 USEFUL FUNCTIONS 7 1 CSR CHECKER This tool is available on the Managed SSL tab of your GCC account Click CSR Checker under the Tools section of the left navigation menu to use the online tool to debug any CSR issues f you try to place an order and the CSR is giving you problems run it through this tool and it should highlight any syntactical errors you may have e g C UK instead of C GB 40
7. Certificate You can order SSL certificates through the pre vetted profiles here See section 2 for more information 3 Pending Approvals You can view all the orders which are pending for approval See section 2 5 for more information 4 Upcoming Renewals You can view here all certificates that are about to expire and are available for renewal See section 4 2 2 for more information 5 Find Order You can search here all the SSL certificate orders made under your account and manage them See section 4 1 for more information 6 Domains amp Profiles This link will redirect you to the page where you can apply and manage all your profiles and domains See section 5 for more information 7 CSR Checker This link will redirect you to the CSR checker page wherein GCC can parse and verify your CSR See section 7 1 for more information 8 My Domains and Profiles List of profiles domains and their vetting level See section 5 for more information about this GETTING HELP Every GlobalSign enterprise customer has a dedicated Account Manager who is on hand to help with any product and technical queries you may have about Managed SSL GlobalSign also provides technical support through our Client Service departments around the world www globalsign com support GlobalSign Americas GlobalSign EU GlobalSign UK Tel 1 877 775 4562 Tel 32 16 891900 Tel 44 1622 766766 www globalsign com www globalsign eu www globalsign co uk sales us g
8. Company Details Change Administrator Manage Users Default Tab Setting iH Statements MY FINANCES E 4 Add Deposit 4er L dep O Current Balances amp Usages when e p i Manage Users Add Deposit View Invoices View Statements Email History View Request Invoices View RFPs Deposits to be Paid Account amp Finance home screen 6 6 1 USER ROLES You may add additional users to your MSSL account Depending on their privileges newly created Users may place new certificate orders add deposit funds or perform reporting Users are defined in roles e Account Administrator This type of user has full control over the account with ability to order any type of certificate amend account profile information and create new Managers and Staff in Charge An administrator can also see any orders placed by other users within the system and can perform actions on them such as re issue cancel revoke etc e Manager Managers administration rights and abilities are determined by the Account Administrator Certificate rights such as application approval and revocation as well as account rights such as adding funds to the account bulk balance and creating Staff in Charge users can be assigned on an individual basis In the event of more than one manager per account they cannot see each other s orders Inthe event of manager one for example being out of the office and a certificate ordered by him needing to be
9. DETAILS After performing a search for certificates you can click Edit next to any certificate found in the search results to see details regarding that order Order Details for CEPO1108249494 Order Summary Common Name globalsign com Certificate Actions Reissue Issued To GMO GlobalSign Ltd Revoke Stat Certificate d cancel atus ertificate Issue Cancel amp Replace Order SE Change User Product OrganizationSSL MSSL AutoC SR AddiRemove SANS Delete AutoC SR PKCS 1 2 Price GBP 1 512 001 20 Issued on 08 24 2011 13 12 GMT 00 00 Expires on 08 24 2013 13 11 GMT 00 00 Order Contact Richard Hancock Send Renewal Reminder Emails Optional Notes Update Complete order details found under the Edit button 4 3 1 ORDER SUMMARY The Order Summary tab displays top level information regarding the order Details such as product price and validity period are shown You can also find certificate files in various formats here Key actions relating to the certificate lifecycle are performed from this screen For more information on these actions please see Certificate Actions above 4 32 FULL ORDER DETAILS The Full Order Details tab provides all information relating to a particular order such as download status of the p12 file the second half of the p12 password and any SAN options You can also 30 copy and paste the CSR and issued Certificate from this screen should the need arise 4 3 3 USER amp CONTACT
10. DETAILS This screen allows you to view and edit the user with whom this order is associated Please note that any changes made here will not be domain wide and only apply to this particular order Click Update to save any changes 4 3 4 GCCEMAIL LOG From here you will see all the emails that have been sent from the system regarding this order Typically you will see Order Confirmation and Order Issuance with Final Action Needed also listed for EV orders 4 35 GCC AUDIT LOG Here are all the actions associated with this order together with date time stamps of when events occurred This screen also specified who performed the action whether it was GlobalSign SYSTEM or a user within your account Order Details for CEPO1108249494 GCC Audit Log Exportto CSV Action details Action date Result User ID CERT ORDER 08 24 2011 13 00 28 GMT 00 00 SUCCESS PARO5988_globalsign CERT ORDER VALIDATION REQUEST 08 24 2011 13 04 06 GMT 00 00 SUCCESS SYSTEM CERT ISSUED 08 24 2011 13 06 02 GMT 00 00 SUCCESS SYSTEM SEAL_REGISTER 08 24 2011 13 06 02 GMT 00 00 SUCCESS SYSTEM DOWNLOAD PKCS12 08 30 2011 13 30 10 GMT 00 00 SUCCESS PARO5988_globalsign EDIT_CONTACT 08 30 2011 13 41 05 GMT 00 00 SUCCESS PARO5988_globalsign 4 Exportto CSV GCC Audit Log see what happened when and whom 31 5 MANAGE DOMAINS amp PROFILES Bod The concept behind Managed SSL is instant issuance and eased management of certificates for all domains
11. RAE set user permissions Snapshot of domains and management options SET USER PERMISSIONS Click Set User Permissions in the Actions column next to the domain you would like to modify This will bring up a list of all users listed for that domain Set User Permissions for globalsign com PAROS988_global99 Test User CJ Submit Cancel Users available for selected domain Specify what rights each user should have by checking the appropriate boxes e Place orders the user can place orders for a particular domain e Approve orders the user can approve orders placed by him herself or others users for 32 a particular domain e Revoke Certificates the user can revoke Certificates issued to a particular domain 5 2 ADD NEW DOMAIN Click Add New Domain in the Profile Actions column to add another domain to a profile For Pro Accounts please be careful that you are in the correct profile when using this as the certificates for the new domain will be issued with the DN of the profile you select Add New Domain Please enter a TLD Top Level Domain to be associated with the profile listed below A vetting process to verify ownership of the domain by the relevant entity will begin after finishing the application Certificate Profile O Marchi Inc S NH Portsmouth United States US Do not include the www or other subdomains Managed SSL operates by validating your top level domain By entering a TLD
12. away to start managing the lifecycle of your SSL Certificates Go to www globalsign com and click Log In at the top of the screen GlobalSign Sales 1 877 775 4562 GMO INTERNET GROUP Enter your User ID and Password Your User ID is the PARXXXX xxxxx number given to you at the end of the MSSL signup process You can also find it in your Welcome Email Your Password is the password you entered during the signup process If your account is configured for Client Authentications then you will see a page similar to this when you login See section for details ACCOUNT amp FINANCE F SSL CERTIFICATES MANAGED SSL m 0 SON ROOS cos ENTERPRISE f MSSL Home This MSSL Account Requires Client Certificate Authentication MY CERTIFICATES Request Client Authentication Certificate Access MSSL Account The security settings on this account require that you authenticate a GlobalSign issued personal ID Client Certificate to access any features Use the link highlighted above left to request a Client Authentication Certificate If you already requested and installed your certificate you can access via the second link in the menu If you have difficulties logging in or forget your password please contact Support at www globalsign com support You will only be able to order Certificates once the vetting of your organization and domain names has been completed You can check your vetting statu
13. re issued only the administrator could perform that task as other managers would not have access to that order e Staff in Charge Users at this level have their administration rights e g certificate application approval or revocation and adding funds to account bulk balance defined by the Account Administrator or the Manager Unlike Account Administrators and Managers Staff in Charge cannot create additional Users 6 6 2 MANAGE USERS Go to the Account amp Finance tab then click Manage Users under the My Account section of the side menu to add or edit users of your account 38 Manage Users Full Department oficial Zi Location ouildi First T UserID CAEN PEL Address TEL Email address DESST HI 22 name name position code name name permissions 01622 Edit PARO5988_globalsign ven SERGE SE 766 richard hancock dlobalsign com Sandling Road Hancock Richard Administrator Test ME14 KentMaidstoneSpringfield d Staff in 5988 global88 TES SUR EEUE 12345 richard hancock globalsign com Sandling Road User Test charge New registration Manage Users screen 6 6 2 1 NEW USERS Click New Registration on the Manage Users screen to add a new user to your account You can assign users to any of three roles previously described Administrator Manager Staff in Charge You can also designate whether the individual will have the ability to approve certificates or add funds to the account
14. receive an automatically generated invoice for every certificate seven days after delivery date If you have already paid your deposit the invoice is provided for information purposes only 6 3 VIEW REQUESTS FOR PAYMENT RFPs Click View RFPs Deposits to be Paid under the My Finances section of the left navigation menu to display any Requests for Payments RFPs that you have associated with your account Please note the status will always say Payment expected by check or bank transfer whether it has been paid or not For your convenience search parameters are included to make it easy to find specific RFPs 36 Request for Payment m Order Date m Approval data m Status A m Order Number Search Reset Depasit amount PDF Order Number Order Dato Approval dai zyme export Vy bt PAZ0O OLILZ70 70 111LFDEMEMT DODE L1 21652000 G6MIT 0000 5 000 DO hose or by bank Delete Nr es er Payment expectet by PDF PA OlOUS295061 Qd 29 20104 GMT OO DO 10 000 00 chaque by bank Delete traatster List of available RFPs with option to download to PDF Customers placing a deposit into their GCC account will receive a Payment Request for advance payment unless the deposit was paid by credit card at the point of ordering 6 4 VIEW STATEMENTS OUTSTANDING FUNDS Click View Statements under the My Finances section of the left navigation menu to view a snapsho
15. up a results page that displays summary information about your orders that fit the defined criteria When the list of certificates appears you will notice several quick action icons next to each order e g revoke reissue Get Cert If the certificate is within the renewal period a renew option will also appear See the Certificate Actions section below for details about certificate activity If you checked the option to include non managed SSL Certificates in your search results they will be highlighted in green 27 4 2 CERTIFICATE ACTIONS 4 2 1 REISSUE AN SSL CERTIFICATE If you need to reissue a Certificate in the case of corrupt broken keys server reinstall etc you can do so directly through your account 1 Click Search Order History and use the search function to find the certificate you need to reissue 2 the certificate appears in the search results click the Reissue button Reissue Please note that although you can elect to use a new CSR the DN information from the profile will be used The reissued certificate will only be valid for the period remaining on the initial certificate 4 2 2 RENEW AN SSL CERTIFICATE You can find a list of certificates within the renewal range ninety days before expiration with the Upcoming Renewals widget in the Managed SSL home screen or by clicking View Upcoming Renewals in the My Certificates side menu Simply click the Renew button that appears next to the certifica
16. without approval privileges your account will be debited upon issuance of the Certificate otherwise your account will be debited immediately e Payment in Arrears This is a post payment option wherein Funds will be added to your account after our finance department receives the Purchase Order via email Availability of this method may vary on your account or region 8 Finally review the Subscriber Agreement check the approval box and you will be finished with the application process Your Certificate will now be issued If the user ordering the Certificate does not have approval privileges the order will need to be approved by a user with approval privileges before issuance 17 2 4 USING THE PUBLIC ORDERING PAGE SSL Managed Service offers the ability for organizations with distributed offices or departments to centralize the Certificate buying process You can publish a unique application page Public Ordering Page or POP so anybody within your organization can apply for a Certificate The URL can be given to applicants or hosted on your intranet The Certificate will not be issued until a User with Approval privileges logs into the account and approves the application this ensure organizations issue Certificates only to legitimate applicants 2 4 1 ACTIVATING THE PUBLIC ORDERING PAGE To activate the POP for a pre vetted domain click the Domains amp Profiles button in the bottom right of the Managed SSL home screen or select Ma
17. E RU 33 s4 UPGRADE TO EV EEVEE VE RING Ee ee Ge p ME ee ee de Ge Ee Ge ei ee ee 33 6 ACCOUNTAND FINANCE PAGE ek Ge De Re oe Ge ee ee ee ee ee a T ed ee 35 6 1 PAYMENT OPTION DEPOSITING FUNDS INTO 35 Gl ADD DEP OSM ca ED OE Ee GO EG Guides EG DE 35 6 12 HOW TO PAY FOR YOUR DEPOSIT Vern ee M ees 35 sher 36 MIEW REQUEST INVOIEES So EE eo De testes ee SO eDim rege er Ee tidie hus 36 6 3 VIEW REQUESTS FOR PAYMENT RER 36 6 4 VIEW STATEMENTS OUTSTANDING FUNDS esse ese ese sees see ee see ee ee ede ee ee enne 37 6 8 ACCOUNT Ierger 37 6 51 AMENDEOMPANY DETAILS eee tod sais dor ova oto cel eva EUR Ne RUE NS YET SE do ee 37 6 5 2 VIEW ALL RECEIVED EMAILS si iate bed n ae vett Ge tenni euo Ure etie des 37 6 6 WSER VIANAGEMNIEN A EE 38 GE E USERROLES EM 38 6 62 MANAGE USER E 38 1 ISEBOLEUINC TIONS d MUCH NOU 40 1 1 Guide cT 40 1 dech lad INTRODUCTION The GlobalSign Certificate Centre GCC is a highly flexible web based certificate lifecycle management portal The GCCcentralizes Certificate management including all types of GlobalSign Digital Certificates and allowing for multiple users Managed SSL MSSL is a solution available via GCC LOGGING IN Once your Managed SSL Account has been approved you can log into the GlobalSign Certificate Center GCC straight
18. FICATES F MANAGED SSL c DOCUMENT CODE ENTERPRISE 5 Product Details GCC Account Setup e CSR AutoC SR Entry Payment Details Canfirm Details Completed MSSL Home V Dn SE A MER Enter Certificate Signing Request CSR Onder Certificates Pending Approvals have CSR and will paste it into the box below View Upcoming Renewals a not have a CSR and would like to use the delivery method We will create FIND CERTIFICATES the CSR and provide a P12 for you Search Order History MY PROFILES Enter Details for AutoCSR Manage Domains and Profiles Ts information wil be welled and must be accurate TOOLS Required field CSR Checker Common Name CH mail local RESOURCES Organization QJ Intranet amp SL Test MSSL Guide Department OU Tesi Locality City Lk Testville State County 3 Test Country C United States US Key Length 2048b4 RSA AutoC SR Password Lusstorrers Using mars ensate an character alphanumeric password in order to access the PROCS file we send The PCR 17 hie will contain both your certificate and piate key and must be picked up within 30 days of your order 7 Select the payment method you wish to use e Credit card Once your Certificate has been issued from our system your card will be charged the full amount e Payment by Deposit Use funds already in your account Ifthe order is placed by someone
19. GlobalSign Enterprise Solutions SSL Managed Service Quick Start Guide version 4 6 Managing EV OV and IntranetSSL Certificates Across Your Organization Effectively GlobalSign GMO Internet Group Copyright 2011 2015 GlobalSign Inc All rights reserved GlobalSign the GlobalSign logo and OneClickSSL are trademarks and registered trademarks of GlobalSign Inc or its affiliates in the United States and other countries All other trademarks are the property of their respective owners TABLE OF CONTENTS TABLE OP CONTENTS M GE Ee ee 2 T INTRODUCTION EO E 4 LE TOG GING IN pcre E E E EE HH 4 1 2 MANAGED SSL PAGE REFERENCE see ees see ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee RE ee ee 4 EC GE pn ee E 5 2 ORDERING CERTIFICATES 7 21 Summary o Ee E Dee ie p eM ee ie nde GO eo elici iurc eo io ie ie 7 PN MEE uoo Nm 7 2142 COV SA ZAC 5 oi gere EN EE N Ag Ee EUER VEO Ge EG 7 LS Se E 7 2 1 4 MSSL Product Feature sissies sees onere tror poo ee Ge eae ee 7 2 2 Ordering KEE e e te 8 2 2 1 ADDING SANS DURING THE ORDERING 5 13 2 3 ORDERING INTRANET SS M 14 2 4 USING THE PUBLIC ORDERING PAG E cccsssssssseccccccccnsssseeccccccseanssseeccccessenassesecseeeeseas 18 2 4 1 ACT
20. IFICATES Order Certificates Pending Approvals E View Upcoming Renewals FIND CERTIFICATES Search Order History JS Intranet MY PROFILES intranetssltes com di Organization SSL Extended SSL e hera Domains and m ch pie Organization SSL Extended SSL kee DER 173 48 134 84 EE RR I Organization SSL Extended SSL CO N Posuit ronn BESSE www glob ci s M Organization SSL Extended sst TEE GlobaiSign rie reserved 3 Specify the signing algorithm that will be used to sign the certificate You can choose any of the following signing algorithm options SHA1 SHA256 and ECC P 256 Perera ee ee eee ee ee ee ee I EER The selection of the Signing Signing Algorithm algorithm specifies the CA hierarchy and Root that will be Ae used to sign this certificate There Please select the signing algorithms to be used by GlobalSign to sign your certificate are different Roots and Subordinate CAs for each ofthe E signing algorithms SHA256 gning SHA1 O ECC P 256 RE EER EER HER EER HER EER HE EER HERE EEE EE HER HER HER EEE REET RETR EERE EEE HER SR HEER EER EER EER ERA RRR EE EEE EE EER REE REE EER EER 2939319 4 Specify the validity period You can choose up to 5 years certificate validity period depen
21. IVATING THE PUBLIC ORDERING ee ee ee ee ee ee 18 2 4 2 CONFIGURING THE PUBLIC ORDERING PAGE esee 19 2 5 APPEROVINGORDERS m 20 3 CLIENT CERTIFICATE AUTHENTICATION iucecsexsstsscki tek sontes Ee Ea Ve ge eb n Ex VER Ee ee ee Ux Ge ee ero PEN be 22 4 MANAGING amp REPORTING ON CERTIFICATES AND ORDERS nnne eene 27 4 1 SEARCHING FORCERTIFICATES EE 27 PLI e CET KC 27 realer tegen Tel KE 28 42 1 REISSUE AN SSL CERTIFICATE esse ir io eie bons dese be od ee ee Ged es Geen ede en 28 42 RENEW AN SSL CERTIFICATE strenue iese ds ne sede ese se RS one es es Pat Gen ee 28 42 3 BEVOKEA CERTIFICATE oues ee a oe ep ee be eg 28 4 2 4 DOWNLOAD CERTIHCATEHUE sesse sees ees ee ee ee ee ee ee ee ee ee ee ee Ee ee ee ee Ee 29 42 5 CANCELA CERTIFICATE sae skorsies seke ee Ged Ge de ERR Ged ie ERG se ee bl ee GN id 29 4 2 6 CHANGE USER ASSOCIATED WITH 29 4 2 7 ADD REMOVE SANS coni siete e ecximi ese nato e ee Dle oe ds ee ee ie 29 4268 EREM 30 4 3 CERTIFICATE EE 30 4 3 1 ORDER SUMMARY bem tos tm ee Ge Ge D eon ee vtr aU ee euis 30 4 32 RULLORDER KE 30 E ERC RE RE RE 31 4 34 GEE EMAILEIOG te ee se ee ee ee ee 31 4 3 5 GCC AUDIT LOG Lisci Am VAN E 31 gt IMANAGE DOMAINS SCPROFIDES been 32 DL SETUSER E e KE 32 5 2 ADP NEW EH 33 5 3 EDIT PROF M
22. P addresses as permitted by the different MSSL products To add SANs to a certificate select the Add specific Subject Alternative Names SANs option during the first step of the order process You may add up 100 SANs certificate M E 1 When a browser comes across a Add specific Subject Alternative Names SANs Cue wih SANS ers fhal the Certificate can be used to Your Certificate will be issued to a specific Domain Name When you buy a Certificate for which e ee met a e www yourdomain com we give you yourdomain com as a free SAN If you want to add further SANs and whatever it finds in the SANs secure multiple sites servers or IP addresses with a single Certificate select Yes and enter the number of section By adding SANs your each SANs type you will add to the Certificate Certificate can secure other server names such as other domain names subdomains IP addresses No Yes and internal server names Add multiple domain names Secure multiple Domain Names they can be different to 1 0 each the Domain Names you will specify in the CSR AutoCSR Add multiple domain names with wildcard secure all sub domains on a single Fully Qualified Domain 1 0 e g SAN in the certificate contains ss globalsign com Add multiple subdomains Secure subdomains of the Domain Name you will specify in 1 0 each the CSR AutoCSR Add multiple public IP addresses Add Public IP Addresses
23. S If you deplete your current deposit you should add additional deposit or alternatively you may downgrade to a Pay As You Go account If you buy using Pay As You Go you can pay by credit card for individual certificates as the certificate is issued Please note that your pricing will be reset to standard Pay As You Go levels therefore in order to maintain current discount levels you should always add an additional deposit 6 2 VIEW REQUEST INVOICES Click View Request Invoices under the My Finances section of the left navigation menu to view all the invoices that have been generated in association with your account Invoices will appear here 8 days after the issuance of the Certificate You can search by invoice number and date to quickly find a given invoice Invoice view page Invoice number e g BL200506000001 Issue date e g 07 30 2007 Show Invoices of canceled yes F no orders j Search Reset Issue Amount Amount asked t T f Carryin Credit Invoice number date making em xus asked including 87 od e not included payment forward Note date tax T PDF BM20120900051925 09 13 2012 5 000 00 GBP 5 000 00 10 12 2012 BM20120900051924 09 13 2012 GBP 5 000 00 GBP 5 000 00 10 12 2012 BM20120900051923 09 13 2012 GBP 5 000 00 GBP 5 000 00 10 12 2012 PDF List of available invoices with option to download to PDF Customers paying via deposit will still
24. Specify the point of contact for certificate delivery or vetting issues Note you can Auto Fill these fields with the contact information for an existing GCC user Ticking the Is this the Point of Contact for communications check box will enable GCC to send email notifications on the email address specified on the Email Address field 10 ACCOUNT amp FINANCE SSLCERTIFICATES 55 SIGNING for ADOBE CDS ENTERPRISE PKI Product Details e GCC Account Setup CSR AutoC SR Entry Payment Details Confirm Details Completed MSSL Home Point of Contact for Certificate Delivery Vetting Issues MY CERTIFICATES AE ME ETER ER ROES AE DE N EE ON OE NE TAN View Upcoming GCC Users Lila Kee Auto Fill Renewals FIND CERTIFICATES Genus GUT The Point of Contact will receive the issued Certificate and Renewal Notices when the Certificate Search Order History approaches expiration This person will also be our point of contact for vetting and technical issues MY PROFILES regarding the application Manage Domains and Required field Profiles First Name Lila TOOLS Last Name Kee CSR Checker Telephone 5555555555 Email Address kee globalsign com Organization Name If different to above Department If different to above Is this the Point of Check the box and to mark this contact as the Contact for point of communications for GlobalSign to contact should there be issues with the ve
25. cause delays in the processing of your order Key Length 2048 bit high security recommended Enter AutoCSR Password You must include both alphabetical and numerical characters in your password Min 8 characters The AutoCSR Password is used to access the issued Certificate and Private Key file Step 3 CSR entry stage with AutoCSR option selected displayed to anyone who clicks on the Site Seal displayed on your website CODE SIGNING PERSONALSIGN r PDF SIGNING for ADOBE CDS SSL CERTIFICATES 5 MANAGED SSL ENTERPRISE PKI Product Details GCC Account Setup CSR AutoC SR Entry Payment Details Confirm Details Completed Enter Secure Site Seal Profile Information Your Profile Information You will be able to display the Secure Site Seal on your webpages When clicked your visitor will be presented with your company profile This will give enhanced confidence in your identity Here is an example of an active Secure Site Seal for the globalsign com domain SSL Seowed GlobalSign CLICK fo WERL PE Information added on this page will be displayed in your company profile To display only the verified information present within your issued Certificate do not add anything else in this page If you wish to add Business Directory ID Number please complete as appropriate Note Some information on this page are verified details and present within your Certificate They may not be amended Organization Na
26. ccount for example other departments individuals suppliers The POP is hosted by GlobalSign when active you are given a unique POP URL Note The Administrator must approve applications before Certificates are issued Public Ordering Page POP Setup Activate Public Ordering Page Submit This page allows you to activate the Public Order Page for a Certificate 18 Similarly you can deactivate the Public Order Page by navigating to the Managed Domains amp Profiles page and selecting Edit Public Order Page in the rightmost column Profile Actions From there simply uncheck the box next to Activate Public Ordering Page and click Submit 2 4 2 CONFIGURING THE PUBLIC ORDERING PAGE Selecting Activate Public Order Page for a Certificate brings up the POP configuration options Within the POP you have the option to upload your corporate logo Please note the image must be in the format GIF PNG or JPG with dimensions no greater than 200x100 Select the fields you would like to have displayed on the POP by checking the corresponding boxes Upload Logo Upload your company logo to be displayed on your POP File format GIF PNG or JPG with dimensions 200x100 or lower only Choose File file chosen Upload POP Configuration Options Check with items to display on your Public Ordering Page General Options Certificate Types Single Domain Certificate C Wildcard SSL Certificate Public IP Address SSL Certificate
27. create one on your web server don t worry just choose one of the alternative methods below Yes lalready have a CSR and will paste it into the input box below default do a CSR so will use the AutoCSR delivery method we generate the CSR for you Enter Details for AutoCSR Profiles TOOLS The next stage asks you to confirm the Secure Site Seal Information ACCOUNT amp FINANCE MSSL Home MY CERTIFICATES Order Certificates Pending Approvals View Upcoming Renewals FIND CERTIFICATES Search Order History MY PROFILES Manage Domains and Profiles TOOLS CSR Checker CSR Checker Please enter the information that allows GlobalSign to create a CSR Certificate Signing Request on your behalf This information will be vetted and must be accurate sure you enter your exact company details Required field Common Name CN sslcerts jp o Make sure the Common Name CN contains the fully qualified domain Organization globalsign Department OU Tech Locality City L Nishinari ku State County 5 Oosaka Country Japan JP name you wish to secure the Organization is your legally incorporated name including any company title such as Inc Ltd NV SA etc and that your Country State County or Province and Locality City or Town match the details for your registered company office Providing incorrect information will
28. ding on your account configuration Validity Period O halfyear 0 1 year 0 2 year 0 3 year 0 O 4 year 0 O 5 year 0 15 5 Specify the point of contact for certificate delivery vetting issues Note you can Auto Fill these fields with the contact information for an existing GCC user Ticking the Is this the Point of Contact for communications check box will enable GCC to send email notifications on the email address specified on the Email Address field M SSL Home MY CERTIFICATES Order Certificates Pending Approvals View Upcoming Renewals FIND CERTIFICATES Search Order History MY PROFILES Manage Domains and ACCOUNT amp FINANCE P SSL CERTIFICATES P CODE SIGNING PERSONALSIGN PDF SIGNING for ADOBE CDS MANAGED SSL 5 ENTERPRISE PKI Product Details o GCC Account Setup CSR AutoC SR Entry Payment Details Confirm Details Completed Point of Contact for Certificate Delivery Vetting Issues Point of Contact 1 GCC Users Lila Kee The Point of Contact will receive the issued Certificate and Renewal Notices when the Certificate approaches expiration This person will also be our point of contact for vetting and technical issues regarding the application x Required field Profiles First Name Lila TOOLS CSR Checker LastName Kee Telephone 5555555555 Email Address kKee globalsign com Organization Name If diff
29. domains that are not pre vetted then you will receive an error message Domain or Profile is not valid or does not exist Please proceed to the Manage Domains and Profiles link under My Profiles to add a domain Refer to section 5 2 for instructions on how to add domains 2 3 ORDERING INTRANETSSL 1 Managed SSL tab click the Order Certificate widget CODE SIGNING PERSONALSIGN m ENTERPRISE FI ACCOUNT amp FINANCE SSLCERTIFICATES MANAGED 551 Eer Es a Managed SSL Home MY CERTIFICATES Order Certificates Pending Approvals View Upcoming Renewals mm Pi om 12 Be OX EE 9 icd FIND CERTIFICATES Search Order History Order Certificate Pending Approvals Upcoming Renewals Find Order Domains amp Profiles MY PROFILES Manage Domains and Profiles My Domains and Profiles TOOLS CSR Checker Domain Name Profile Name Vetting Level sslcerts jp globalsign Organization SSL sslcerts jp mike inc Organization SSL 2 To order IntranetSSL Certificate with an internal server name or Reserved IP address in the CommonName click on the Order Certificate button with the Internal Domain IP domain name on the list If you want an IntranetSSL with a FQDN in the CommonName click the applicable Order Certificate button 14 ACCOUNT amp FINANCE F SSLCERTIFICATES 5 ENTERPRISE PKI vot m Certificate Order Certificates MY CERT
30. e Domains and Profiles My ind Profiles TOOLS CSR Checker Domain Name Profile Name Vetting Level ssicerts jp globalsign Organization SSL ssicerts jp mike inc Organization SSL MSSL home screen You will be presented with a list of domains vetted in your account along with the level of vetting that was applied to them i e EV OV and or IntranetSSL ACCOUNT FINANCE SSLCERTIFICATES Ee a a am SIGNING for ADOBE CDS ENTERPRISE El MSSL Home Certificate Order Certificates MY CERTIFICATES Order Certificates e eT TE Pending Approvals Domain Name Profile Name View Upcoming Renewals O globalsign sskersjp H Organization SSL FIND CERTIFICATES 7 e mike inc URNA Search Order History ssicerts jp Edit Profile a Organization SSL Order Certificate MY PROFILES Manage Domains and Profiles TOOLS CSR Checker Order Certificates screen 1 Click Order Certificate to begin the Certificate application process for one of your pre vetted domains 2 The application workflow will display the product and options available based that domain s vetting level SSL CERTIFICATES f MANAGED SSL venere eens ENTERPRISE f amp Product Details GCC Account Setup CSR AutoC SR Entry Payment Details Confirm Details Completed MSSL Home MY CERTIFICATES Certificate Application Order Certificates Pend
31. e application 20 Administrators and Users with approval rights can access their lists of pending orders by selecting Pending Approvals from the My Certificates section of the left navigation menu Each order will have a checkbox next to it Select the orders you would like to modify and click Approve or Reject depending on the required action 21 CLIENT CERTIFICATE AUTHENTICATION You may request to have your GCC account upgraded to be Client Certificate Authentication enabled If your account is enabled for client authentication you will not have access to the MSSL tab until you request and receive a client certificate Once logged into your account click on the MSSL tab Click on the Client Certificate Authentication link located on the left side of the page ACCOUNT amp FINANCE CODE SIGN PERSONAL SIGN SSL CERTIFICATES ODE SION PERSONAL SIOM ENTERPRISE j MANAGED SSL MSSL Home This MSSL Account Requires Client Certificate Authentication MY CERTIFICATES Request Client Authentication Certificate X Access MSSL Account The security settings on this account require that you authenticate a GlobalSign issued personal ID Client Certificate to access any features Use the link highlighted above left to request a Client Authentication Certificate If you already requested and installed your certificate you can access via the second link in the menu
32. erent to above If different to above Department Check the box and to mark this contact as the point of communications for GlobalSign to contact should there be issues with the vetting or Is this the Point of Contact for communications renewal of this Certificate NEE After specifying your certificate details you will be prompted to enter the Certificate Signing Request CSR Follow the instruction on this link to generate your own Certificate Signing Request CSR https support globalsign com customer portal articles 1229769 If you do not have a CSR you can use the Many of the details needed for the AutoCSR will Fill in any remaining details and enter an alphanumeric AutoCSR delivery method and we will generate one for you be pulled from the profile from which you re ordering password you will need when installing your Certificate If you initiated your order using the Order Certificate button next to Internal Domain IP then you must enter an internal server name or Reserved IP address into the CN If you selected the Order Certificate button next to a domain you must enter a CN that ends in this domain as is the case when ordering ExtendedSSL and OrganizationSSL certificates Note If you choose the AutoCSR delivery method please make note of the AutoCSR password provided You will need the full password to gain access to the 5 12 file we will send you 16 ACCOUNT amp FINANCE j SSLCERTI
33. he left side of your screen 6 1 1 ADD DEPOSIT If you simply want to add a set amount of funds to your account not based on a specific order you can choose to add a deposit at any time Click Add Deposit under the My Finances section of the left navigation menu to input the exact amount of money that you wish to add to your account Once you have specified the amount you will be taken to the payment process Direct purchase of deposit Account Balance 0 00 Deposit money 1000 Purchase order Number To appear on your invoice Select Payment Method Bank Transfer aPayment details Payment in Arrears Invoice to be paid as per applicable payment terms O credit card Add deposit option 6 1 2 HOW TO PAY FOR YOUR DEPOSIT Complete the steps for Add Deposit as detailed above to add funds to your account You have two payment options to settle the deposit amount e Bank transfer Payment in Arrears Select to pay for deposit via Purchase Order Funds will be added to your account after our finance department receives the Purchase Order via email e Credit Card 35 6 1 3 You will be asked to provide the details for the selected Credit Card before the Deposit amount 15 added The credit card is charged immediately When buying certificates using the funds you have deposited be sure to select Deposit as the Payment Option at the payment point in the purchasing process DEPLETED DEPOSIT
34. http www globalsign com support index php Il The enrollment period will expire 07 14 2013 Contact uour a DI Adminictratar far additional informatinn 23 A pop up window will appear asking you to enter your Pick up Password Then click Next ry GlobalSign GMO Internet Group You will now go through the Certificate generation and installation process Enter your Temporary Certificate Pick up Password Enter the Pickup Password to continue Forgotten the Pickup Password Contact Support immediately for assistance Next You will be requested to create a new password that we will refer to as the Private Key password Next you will need to agree to the Subscriber Agreement and then click the Next button GlobalSign GMO Internet Group Certificate Password Required Password must be a minimum of 12 characters Alpha numeric values only A Z 0 9 Certificate Password re enter Required Subscriber Agreement a t GlobalSign Subscriber Agreement Digital Certificates and Services Version 2 5 PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE DIGITAL CERTIFICATE ISSUED TO YOU OR YOUR ORGANIZATION BY APPLYING FOR A DIGITAL CERTIFICATE YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS AGREEMENT IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT PROMPTLY CANCEL THE ORDER WITHIN 7 DAYS OF THE APPLICATION FOR A FULL REFUND IF YOU HAVE PROBLEMS UNDERSTANDING THIS 4
35. ing Approvals View Upcoming Renewals Products FIND CERTIFICATES Search Order History OrganizationSSL MY PROFILES Extended Validation EV SSL Manage Domains and Profiles IntranetSSL TOOLS Check to upgrade this application o Get the Green Bar to ExtendedSSL Shoppers react RESOURCES to the Green Bar so by upgrading y ximize y li MSSL Guide Upgrade to ExtendedSSL for maximum trust in your site ed tia ae VOS your web site v Step 1 select product details 3 Specify the signing algorithm that will be used to sign the certificate Using SHA 256 signing algorithm will give you the highest level of security It will also have a maximum certificate validity of 3 years since SHA1 has a maximum of 1 year certificate validity and will be deprecated in December 2015 Browsers will display a warning triangle in their address bar for websites using SHA1 certificates in certain cases gt 8 2 SHA256 certificates offer the Signing Algorithm o highest level of security but in few instances may not be IA compatibile with older browser Please selectthe signing algorithms to be used by GlobalSign to sign your certificate configurations x SHA1 certificates are being SHA256 Highest Security Option aggressively phased out by the industry SHA1 Note you can ask GlobalSign support to set your account to issue SHA 256 certificates only and this will eliminate the SHA1 option on the above screen 4
36. lobalsign com sales globalsign com sales globalsign com GlobalSign FR GlobalSign DE GlobalSign NL Tel 33 1 82 88 01 24 Tel 49 30 8878 9310 Tel 31 20 8908021 www globalsign fr www globalsign de www globalsign nl ventes globalsign com verkauf globalsign com verkoop globalsign com GlobalSign SG GlobalSign IN Tel 65 3158 0349 Tel 91 11 41106000 www globalsign sg www globalsign com en in Sales apac globalsign com sales globalsign com 2 ORDERING CERTIFICATES 2 1 Summary of MSSL Products Depending on your account configuration you will see one or more of these product options 2 1 1 Extended SSL ExtendedSSL is the product name for GlobalSign s Extended Validation EV SSL offering and is issued in strict adherence the published CA B Forum EV SSL guidelines covering certificate profile format vetting method and workflow This product is limited to a 2 year validity period option and up to a maximum of 27 months with added renewal bonus months It also does not support wildcard nor IP address options 2 1 2 OrganizationSSL OrganizationSSL is the product name for GlobalSign s Organizational Vetted certificates which contain the company name on the certificate subject DN When placing an OrganizationSSL order into an MSSL profile the applicant has a number of options available to them e Base Certificate type OrganizationSSL supports Standard Wildcard and Global IP Publicly routable IP addresses as values in the certificate Co
37. me globalsign Street Address 1 Street Address 2 City Nishinari ku State or County Oosaka Zip code Postal Code Country Japan JP Step 3 confirm site seal details Select the payment method you wish to use This information will be e Credit card Once your Certificate has been issued from our system your card will be charged the full amount 12 e Payment Deposit Use funds already in your account If the order is placed by someone without approval privileges your account will be debited upon issuance of the Certificate otherwise your account will be debited immediately e Payment in Arrears This is a post payment option wherein Funds will be added to your account after our finance department receives the Purchase Order via email Availability of this method may vary on your account or region 8 Finally review the Subscriber Agreement check the approval box and you will be finished with the application process Your Certificate will now be issued If the user ordering the Certificate does not have approval privileges the order will need to be approved by a user with approval privileges before issuance 2 2 1 ADDING SANS DURING THE ORDERING PROCESS Standard SSL Certificates secure a single Fully Qualified Domain Name FQDN By adding SANs a single certificate can secure multiple server names such as other domain names wildcards subdomains public IP addresses Internal Server Names and Reserved I
38. mmon Name e SAN Options Depending on the options configured for your account you can order certificates with a variety of SAN options including FQDN SubDomain Global IP Unified Communications and Wildcard e Unified Communications Support You may specify the entry of the following host names for no additional fee owa autodiscover and mail e Provide a CSR or have GlobalSign generate the keys You can enter a CSR or request that GlobalSign creates the keys and corresponding CSR on the fly AutoCSR Certificates requested using AutoCSR are returned in a packaged encrypted PKCS 12 file containing both the Certificate file and private key 2 1 3 IntranetSSL The IntranetSSL certificates are issued under a set of Non Public Roots which are not distributed within the major browser or operating system Root key stores The use of non Public roots allows the issuance of certificates which do not need to comply with the industry CA B Forum or Root store requirements specifically the ability to issue certificates with internal server names If you want to use IntranetSSL you will need to distribute the Root s to your applications and or browsers accessing sites secured with IntranetSSL or they will receive untrusted CA warnings IntranetSSL supports many of the options in OrganizationSSL plus the use of Internal Server names or reserved IP addresses in the CN or SAN as well as certificate validity period up to 5 years 2 1 4 MSSL Product Featu
39. must be publicly accessible and 1 owned by the applicant organization 0 each Add multiple internal server names or internal 2 0each IP addresses Add Internal Addresses such as 10 1 1 1 or localhost SANs options and prices depend on the product and your account settings Later in the ordering process you will be asked to specify the values for of the SANs you selected on the page above 13 ACCOUNT amp FINANCE jj SSLCERTIFICATES 5 MANAGED SSL T DOCUMENT CODE ENTERPRISE 5 Preduct Detalls GCC Account Setup e CSF AutoC SR Entry Payment Detalls Confirm Detalls Completed MSSL Horne MY CERTIFICATES Order Certificates Enter Option Pending Approvals d View Upcoming Renewals Subject Alternative Names SANs FIND CERTIFICATES You have requesbed SANs to be added to your Cerificate Complebe the below SAN entry bekis Search Order History Domain Names ssicerts p MY PROFILES Manage Domaines and ae Profiles Domain Names with ssicerts Secure sub domains ZS wildcard singke Fully o Qualmeg Domain TOOLS Mame e CSR Checker eg in the certificate contains RESOURCES ssigiobalsign com MSL Gurie Subdomains mailserver ssicerts p Public IP Addresses 173555 Internal Server Names mailserver internal Internal IP Addresses 10 1 1 1 Example SANs entry fields for adding multiple SAN types If you enter
40. nage Domains amp Profiles under the My Profiles section of the left navigation menu This will bring you to a screen that lists your domains and Certificate profiles Manage Domains amp Certificate Profiles Add or remove domains associated with your vetted profiles Set User Permissions for granular control of which users have access to ordering for each domain O globalsign mike99 ssicerts jp Invalid SS Add New Domain OU Tech mike98 sslcerts jp Invalid Edit Profile dit Profile 5 Oosaka Available ov mere Glace L Nishinari ku ssicerts j Available remove Upgrade to EV Vetting Level ft i M user permissions Edit Public Order Page C Japan JP Add New Domain OU sates remove Edit Profile ssicerts Available i PRE o E set user permissions opd Upgrade to EV Vetting Level kamakura Activate Public Order Page C Japan JP Manage Domains amp Certificate Profiles screen Find the Certificate Profile for which you would like to create a POP and select Activate Public Order Page in the rightmost column Profile Actions When the Public Ordering Page screen appears check the box for Activate Public Order Page and click Submit This will bring up the POP URL as well as configuration options See Configuring the Public Order Page section below for details Public Ordering Page The Public Ordering Page POP allows public applications for Certificates through your a
41. owned by one account Accounts can be comprised of one single organization or an umbrella entity MSSL Pro only containing multiple companies branches and departments These subdivisions are collectively known as profiles and contain their own set of domains Each subsidiary can have its own profile DN data and related domains with appropriate users within the subsidiary only ordering for their own company while still centralizing management and billing for the parent account In order to upgrade your MSSL account to Pro where you can have multiple profiles with separate DN information please contact your Account Manager Please note only MSSL Pro customers are able to have more than one profile within their account Click Manage Domain amp Profiles under the My Profiles section in the left navigation menu to access domain management Here you ll find a snapshot of your domains and several management functions Manage Domains amp Certificate Profiles Add or remove domains associated with your vetted profiles Set User Permissions for granular control of which users have access to ordering for each domain emove globalsign com Available temovg A set user permissions GMO GlobalSign Ltd Add New Domain S Kent remove Edit Prafile lobalsign co uk Available EE EER Available OV EEDEN L Maidstone 9 9 user permissions Upgrade to EV Vetting Level United Kingdom GB Activate Public Order Page globalsign net Available E
42. ownload the p12 file containing the private key certificate If you used a standard CSR during application this will download the intermediates end entity certificate 1 Click Search Order History and use the search function to find the certificate for which you need to download the file 2 2 the certificate appears in the search results click the Get Cert button Gerten 4 2 5 CANCEL A CERTIFICATE This option will be available for 7 days after issuance of the certificate Choose this to completely cancel your order and have the funds credited to you via the original payment method 1 Click Search Order History and use the search function to find the certificate you need to cancel 2 Once the certificate appears in the search results click the Edit button to bring up the Order Details screen 3 Make sure you are on the Order Summary tab and click Cancel under the Certificate Actions menu in the right column 4 2 6 CHANGE USER ASSOCIATED WITH CERTIFICATE This assignment dictates who will receive renewal notices associated with the certificate Whoever applied for the certificate is automatically assigned this role but the user can be changed This function is especially useful during employee and role transitions within an organization 1 Click Search Order History and use the search function to find the certificate you need to modify 2 Once the certificate appears in the search results click the Edit but
43. provided during the application process and submit to our Vetting Team Upon receipt of the request form the Vetting Team will send a subscriber agreement to your designated authorized person for signing 33 To help speed up process please make sure that we are able to independently verify the data you submit For example you should enter the full legal name of your company e g My Company amp Sons Inc instead of My Company Contact your Account Manager for assistance 34 6 ACCOUNT AND FINANCE PAGE All financial activity is controlled and monitored from the Account amp Finance tab of your GCC account ACCOUNT amp FINANCE E SSL CERTIFICATES MANAGED SSL ENTERPRISE PKI CODE SIGNING PERSONALSIGN DOCUMENT SIGN FOR ADOBE PDI Account amp Finance Home MY ACCOUNT Account and Finance Amend Company Details Change Administrator Manage Users Default Tab Setting MY FINANCES Add Deposit Current Balances amp Usages Change Biling Manager Manage Users Add Deposit View Invoices View Statements Email History O View Request Invoices View RFPs Deposits to be Paid Account and Finance home screen 6 1 PAYMENT OPTION DEPOSITING FUNDS INTO ACCOUNT Using the account funds option gives you a discount To be able to pay for certificates using deposited funds you must first deposit funds into your account by clicking Add Deposit in the My Finances section of the menu on t
44. re Comparison This is a summary of the various ordering features and options per product Function ExtendedSSL OrganizationSSL IntranetSSL Base Options e Wildcard e Global IP e Private Internal Server name Validity Period in request years Maximum cert validity period months e Renewal SHA 1 AutoCSR RSA keys only ECC is not supported N Y O Y e ECCP 384 e Transfer e ECC P 256 CSR Key Types supported Site Seal PN Type of Order Signing Algorithm CA Hierarchy Unified Communications e RSA 2048 4096 SHA 1 options for and OV will end on December 14 2015 due to Industry requirements SHA 1 27 39 e New Y Y Y Y Y Y e SHA 256 Y Y Y Y N N O Y Y LN SAN types Y Y SubDomain y Y Global IP Address N Y Wildcard N Y Internal SAN or Reserved IP address N N e ECC P 256 will continue to be an option for IntranetSSL since it is a non public hierarchy and is exempt from Industry requirements 2 2 Ordering MSSL Certificates On the Managed SSL tab click the Order Certificate widget SSLCERTIFICATES Ef TT EEN N Y CODE SIGNING PERSONALSIGN ENTERPRISE PKI nm Managed SSL Home MY CERTIFICATES Order Certificates Pending Approvals ACCOUNT amp FINANCE Pl o View Upcoming Se Ga e Renewals H x el FIND CERTIFICATES Search Order History Pending Approvals Upcoming Renewals Find Order Domains amp Profiles MY PROFILES Manag
45. s anytime by logging into your account MANAGED SSL PAGE REFERENCE Below is the screenshot of what you will see under the MANAGED SSL Tab in GCC The numbered indicators correspond to a reference that will help you on navigate and how to use the Managed SSL page When ordering MSSL certificates please be sure you are in the MANAGED SSL tab UK ACCOUNT FINANCE SSLCERTIFICATES 8 Ke ENTERPRISE MANAGED SSI LA MSSL Home Managed SSL Home MY CERTIFICATES Order Certificates Pending Approvals m 6 View Upcoming Renewals li Bin C H 12 A r FIND CERTIFICATES EN Search Order History ME pi decet ne Order Certifi Pending A U R 1 Find Ord Do amp Profil 6 Manage Domains and rder Certificate ending Approvals pcoming Renewals ind Order mains rofiles Profiles TOOLS 8 My Domains and Profiles 7 CSR Checker RESOURCES Domain Name Profile Name Vetting Level MSSL Guide olver sslcerts jp globalsign Organization SSL Extended SSL lina ssicerts com globalsign Organization SSL sslcerts jp globalsign Organization SSL Extended SSL tsg ssicerts jp globalsign Organization SSL www handshake state1 com globalsign Organization SSL 55124 jp globalsian Organization SSL References 1 Account amp Finance Tab This will redirect you to the Account amp Finance Page where you can manage all your account information See the section 5 for more information 2 Order
46. such as domain com you will be able to purchase www domain com or secure domain com from your account without the need for additional validation steps Domain Name LLL E Submit Cancel Add new domain to existing Certificate profile Our Vetting Team will be alerted when a new domain has been added to your profile You can monitor the status of your new domain request from the Manage Domains amp Certificate Profiles page After your ownership of this domain has been verified by the team you will receive an email alert and will be able to issue Certificates to that domain 5 3 EDIT PROFILE Click Edit Profile in the Profile Actions column to amend details contained within your profile Please note if your profile is active this action will suspend the account until our Vetting Department have verified the new information and re activated it Changes are not retrospective 5 4 UPGRADE EV LEVEL VETTING Click Upgrade to EV Vetting Level in the Profile Actions column to upgrade a profile vetted to the Organization Validated OV level to the Extended Validation EV level Appropriate vetting will take place and the account will be re activated once completed While upgrading you will be asked for some additional information to enable us to efficiently vet the account Please have details such as company number appropriately authorized personnel and place of business available You will also need to print off an EV request form
47. t available to applicants You also have the ability to display custom fields for your environment Click the Custom Fields tab on the POP Configuration Page to modify and create fields POP Configuration Options Check with items to display on your Public Ordering Page Custom Fields Custom Field Field Tile Employee Number d Required Example custom field entry on the POP Configuration Page For example if you require an employee number with every request this can be added as a custom field to your POP You can make any or all of these fields mandatory Any custom fields you create will appear under Contact Information on the POP itself Once you have finished configuring your POP click Submit at the bottom of the screen You will be asked to review and confirm the configuration Select Complete at the bottom of the page to finalize your POP You can now pass the URL on to appropriate individuals or host on your intranet You can modify the POP at any time by navigating to Manage Domains amp Profiles from the Managed SSL menu to the left of your screen and clicking Edit Public Order Page 2 5 APPROVING ORDERS Applications made by Users without approval privileges or applications made using the Public Ordering Page must be approved by a User with approval privileges When such applications are made an email alert will be sent to the Account Administrator and the certificate will not be issued until the Administrator has approved th
48. t of how much money is outstanding within your account This is the sum of all certificate values minus what you have paid GlobalSign Statement management GBP 0 00 Last updated Snapshot of any outstanding funds in your account 6 5 ACCOUNT MANAGEMENT These functions are available on the Account amp Finance tab of your GCC account 6 5 1 AMENDCOMPANY DETAILS Click Amend Company Details under the My Account section of the left navigation menu to edit any of your company details including name address contact details VAT number etc 6 5 2 VIEW ALL RECEIVED EMAILS Click the Email History widget on the Account amp Finance home screen view all GCC emails that have been sent in relation to all orders that have been placed within your account You also have the ability to resend any of the emails if they have not been received or were caught in spam filters etc 37 6 6 USER MANAGEMENT It is important to determine the structure and the permission levels you wish to create as Account Administrator before you begin to create a delegated administration hierarchy within the GCC system although it is possible to edit the permissions for users in the future User management is accessed via the Account amp Finance tab of your GCC account SSL CERTIFICATES MANAGED SSL ENTERPRISE PKI ACCOUNT amp FINANCE RE AV Account amp Finance Home MY ACCOUNT Account and Finance Amend
49. te You can also renew certificates using the search function 1 Click Search Order History and use the search function to find the certificate you need to renew L 2 Once certificate appears in the search results click the Renew buttonFenew Please note this button will only appear if the certificate is within the renewal range 90 days before expiration GlobalSign will send a renewal notice to the contact associated with the order 90 days prior to the expiration of the certificate See the User amp Contact Details section below to for information on modifying contacts If you renew a certificate before it expires GlobalSign will add any remaining time onto the new certificate and give you the option of an extra 30 days free of charge 4 2 3 REVOKE A CERTIFICATE If your server and or private keys have been compromised then you will want to revoke the certificate This will cause any visitors to the associated website to receive a pop up warning of the certificate status and instructing them not to trust the site This will add the certificate serial number to the GlobalSign CRL and OCSP servers which are then propagated across the Internet 1 Click Search Order History and use the search function to find the certificate you need to revoke 2 the certificate appears in the search results click the Revoke buttonfewke 28 4 2 4 DOWNLOAD CERTIFICATE FILE If your order was an AutoCSR then this will d
50. the process a message will confirm that it was successful You can then go back to your account click View Admin Menu Options in the My Certificates menu ACCOUNT amp FINANCE Home MY CERTIFICATES View Admin Menu Options You will be prompted to choose the Client Certificate that you just installed You can verify the correct certificate as its common name will be your account login Windows Security 4 x Confirm Certificate Confirm this certificate by dicking OK If this is not the correct certificate dick Cancel PAR68567_UserName Issuer GlobalSign PersonalSign 2 CA G2 lt You will then have full access to all of the MSSL portal s functionality ACCOUNT 8 FINANCE 5 SSL CERTIFICATES f amp EMAIL SIGNING ENTERPRISE Managed SSL Home MY CERTIFICATES Order Certificates Pending Approv 115 D N iv o View Upcoming Renewals A s zy 12 g zx FIND CERTIFICATES ER BN el OP Search Order History MY PROFILES i RESCH Order Certificate Pending Approvals Upcoming Renewals Find Order Domains amp Profiles Profiles TOOLS My Domains and Profiles CSI RESOURCES Domain Name Profile Name Vetting Level MSSL Guide globalsign com GlobalSign Inc For test purposes only Organization SSL Note Client certificates issued to EPKI administrators can also be used for the MSSL client certificate authentication
51. ton to bring up the Order Details screen 3 Make sure you are on the Order Summary tab and click Change User under the Certificate Actions menu in the right column 4 2 7 ADD REMOVE SANS This option will enable you to change the Subject Alternative Names configuration of your certificate SANs allow the addition of other domain name subdomains or hostnames into a single SSL Certificate The type of SAN option available here is dependent on the certificate type 1 Click Search Order History and use the search function to find the certificate you need to modify 2 Once the certificate appears in the search results click the Edit button to bring up the Order Details screen 3 Make sure you are on the Order Summary tab and click Add Remove SANs under the 29 Certificate Actions menu in right column 4 2 8 DELETE AUTOCSR PKCS 12 This option allows you to delete the p12 file for this Certificate from our servers Please ensure that you have a backup of it before performing this action as it cannot be undone 1 Click Search Order History and use the search function to find the desired certificate 2 Once the certificate appears in the search results click the Edit button to bring up the Order Details screen 3 Make sure you are on the Order Summary tab and click Delete AutoCSR PKCS 12 under the Certificate Actions menu in the right column Please Note Keys will automatically be deleted in 30 days 4 3 CERTIFICATE
52. tting or renewal of this Certificate communications ELA Step 2 specify point of contact After specifying your certificate details you will be prompted to enter the Certificate Signing Request CSR Follow the instruction on this link to generate your own Certificate Signing Request CSR https support globalsign com customer portal articles 1229769 If you do not have a CSR you can use the AutoCSR delivery method and we will generate one for you Many of the details needed for the AutoCSR will be pulled from the profile from which you re ordering Fill in any remaining details and enter an alphanumeric password you will need when installing your Certificate 11 provided MSSL Home MY CERTIFICATES Order Certificates Pending Approvals View Upcoming Renewals FIND CERTIFICATES Search Order History MY PROFILES Manage Domains and ACCOUNT amp FINANCE Note If you choose the AutoCSR delivery method please make note of the AutoCSR password You will need the full password to gain access to the PKCS 12 file we will send you CODE SIGNING PERSONAL SON PDF SIGNING for ADOBE CDS SSL CERTIFICATES E MANAGED SSL ENTERPRISE PKI amp Product Details GCC Account Setup e CSR AutoCSR Entry Payment Details Confirm Details Completed Enter Certificate Signing Request CSR If you have a CSR please complete the section below If you do not have a CSR or do not know how to
53. uire for Unified Communications specific sub domains and IP addresses e Validity Period Select how long you would like the certificate to be valid for to the maximum allowed for that particular product OV 3 years EV 2 years 19 e Switching from a Competitor Choose this option to allow applicants to trade in a competitor s certificate Trade ins get further benefits such as deeper discounts any time remaining on their old certificate transferred to the new certificate and an additional 30 days added to the validity period of the certificate If you want applicants to only place new orders leave this option unchecked e Add Authorization Code To enhance security you can choose to require a passphrase with an application request so an applicant will have to input the code before proceeding with an application If you choose this option please ensure that you communicate the passphrase to your POP recipient outside of the GlobalSign system We do not recommend plain text e mail for this communication Digitally signed and encrypted is our recommended method e Payment Choices You can choose to have fixed payment method meaning all costs will be deducted from any bulk funds you have in your account or allow the POP applicant to choose at the point of order The applicant can choose to use existing account funds pay via purchase order or use a credit card You must turn on the option for credit card if you want to make i
Download Pdf Manuals
Related Search