Versions Compared

Old Version 3

changes.mady.by.user Kent Engström

Saved on

compared with

New Version 4

changes.mady.by.user Kent Engström

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Yes! Go to Certificates → Organizations and select the right organization. Then click Submit for Validation. In the popup, check "EV" and select the right adminstrator as "EV Verified User". Then click Submit for Validation again.

Requesting Certificates

Can anybody enter a certificate request into the system?

No. You need a user in the system to be able to request a certificate. As an administrator, use the Add User button under Account → Users. Select the User Role, not Administrator, for this kind of user. The user will get an email and gets to set his/her password.

How do we request a certificate?

After logging in at http://www.digicert.com/account/, got to Certificates and press the Request a Certificate button. Select the right type of certificate, press Order Now, fill in the form and use Submit Certificate Request

What SSL Certificate types should we use?

This is for server certificates outside of the grid (e-Science) world. Use

  • Multi-Domain SSL for normal, OV certificates. They can contain subject alternative names if you want (up to 150 names). There should be no reason to use the more limited SSL Plus version.
  • EV Multi-Domain for EV (Extended Validation) certificates. They can contain subject alternative names if you want. There should be no reason to use the more limited EV SSL Plus version.
  • WildCard Plus if you need a wildcard subject name (CN).

What Grid Certificate types should we use?

For server and robot certificates in the grid (e-Science) world.Use

  • Grid Host Multi-Domain SSL for server certificates (there should be no need to use the more limited Grid Host SSL type).
  • Read the GÉANT Wiki page about Grid Certificates for information about robot certificates.

Do not request client/personal grid certificates using this portal. Use the DigiCert personal certificate portal.

What Client Certificate types should we use?

Do not request client/personal certificates using this portal. Use the DigiCert personal certificate portal.

What Code Signing types should we use?

See the GÉANT Wiki page about Code Signing certificates.

What Document Signing types should we use?

See the GÉANT Wiki page about Document Signing certificates.

How do we approve requested certificates?

Logged in as an administrator, go to Certificates → Requests, select the pending request, and FIXME!