This is for administrators at Sunet TCS members for the 2025- "HARICA generation" of the Sunet TCS service.
THIS IS WORK IN PROGRESS. PLEASE DO NOT REGISTER / SEND EMAILS BEFORE WE INFORM YOU ON SUNET-TCS-MEMBERS AND SUNET FORUM TCS.
The HARICA Certificate Manager is located at https://cm.harica.gr
Consider joining the TCS network at https://forum.sunet.se/s/tcs/ to get information and to be able to discuss the service with Sunet TCS and other users. Important news will also be shared, as before, using the SUNET-TCS-MEMBERS mailing list (where one function address per organization is present since your organization joined the service), but information about minor issues may be shared here, as well as tentative information before we know enough to raise it to the SUNET-TCS-MEMBERS level.
Email tcs@sunet.se after making sure that this document does not contain the answer to your question or a solution to your problem. Do not email Kent's personal email address.
2025-01-10: For the time being, contact HARICA support only on instructions from Sunet TCS. We will provide you with the email address when doing so.
Look at https://wiki.geant.org/display/TCSNT/TCS+2025+FAQ but keep in mind that parts of that documentation is for NREN administrators (called Enterprise Manager in HARICA CM) and not for organisation administrators (called Enterprise Admin in HARICA CA).
The HARICA Certificate Manager of course looks different from the Sectigo Certificate Manager. We are all using the same URL for HARICA CM (not a specific Sunet URL).
The containter that keeps your organization details together with the set of domains and certificates that belong to you is now called Enterprise in HARICA CM, instead of Organization (as in Sectigo CM) or Division (as earlier at DigiCert).
You who are administrators at this level are now called Enterprise Admin (approximately the same role as RAO in the Sectigo CM).s you
There is no direct replacement for the Department level that existed below Organization in the Sectigo CM, and as such there is no role corresponding to DRAO.
2025-01-10: There may be ways to implement this in the future. Please do not attempt do recreate this using Subunits or other things you find in the interface unless instructed by Sunet TCS.
The HARICA CM allows people to create users that will be matched to you organization via domain matching on the email address. Such users start out without any privileges in the system (cannot approve certificates, cannot add domains etc) but they can request certificates. This resembles the model we had with DigiCert (for Sectigo, there were only admin users of various levels).
From the start of the service your can get this before your Organization Validation is completed:
When Organization Validation is completed you can also get:
Server certificate EV is not part of the contract.
2025-01-10: Server certificates and authentication certificates for grid use will become available later
2025-01-10: Other certificate types such as code-signing should become available later for a per-certificate fee
To get access to the new system, first:
Then email tcs@sunet.se with a subject line like "TCS2025: organization name" and tell us:
When we receive and handle the requests, we will create your Enterprise (the HARICA term for the container for your organization and its domains, certificates etc) in the system and make the indicated user the first Enterprise Manager for you.
Contact tcs@sunet.se about membership in the service. Do not send any paper documents before that and do not register in the HARICA CM system.
To validate the first domain added when your enterprise was created or any additional domains added later, go to Enterprise → Admin and select your enterprise line. In the new pane, select Domains. You will now be able to use the Validate Domain button to initiate Domain Control Validation (DCV).