gas user guide - retail 1.2 - globalsign
TRANSCRIPT
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 1 of 23
US Office - Two International Drive | Suite 330 | Portsmouth | NH 03801 UK Office – 6 Kings Row | Armstrong Road | Maidstone | Kent | ME15 6AQ
EU Office – UbiCenter | Philipssite 5 | 3001 Leuven | Belgium Japan Office 20-1 Sakura-gaoka-cho | Shibuya-ku | Tokyo 150-0031
GAS (Global Agent System) Retail Certificate Issuance Edition 1.2
GlobalSign created the GAS (Global Agent System) as a highly flexible, multi-tiered, multi user certificate lifecycle management tool to maximize the benefits in choosing GlobalSign as the provider of your digital identities. This user guide addresses the specific needs of the Retail account user as well as a basic understanding of digital certificates. If you require advice or information concerning SSL Managed Service accounts or Partner/Reseller accounts, please contact your GlobalSign Account Manager or e-mail [email protected]. A very basic architecture of the GAS system is illustrated below, highlighting the three alternative account types.
GAS (Global Agent System)
The latest versions of the user guides are located here:- https://www.globalsign.com/resources/userguides/reseller.pdf https://www.globalsign.com/resources/userguides/sslmanagedservice.pdf https://www.globalsign.com/resources/userguides/retail.pdf
o v e r 1 0 y e a r s o f s e c u r i n g identities, web sites & transactions
For more enhanced details on anything in this user guide please refer to: www.globalsign.com
[email protected] US: 866 511 5035
UK: +44 1622 766766 EU: +32 16 89 19 00 JP: +81 03 5728 1551
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 2 of 23
1. Useful numbers and answers to FAQ’s Technical Support
All technical questions regarding your certificates should be forwarded to our Support Department, but please first have a look at our FAQ's. (http://www.globalsign.com/support/techfaq.html ) It is very likely that this will allow you to find an answer to your question and this also allows us to solve your issue most efficiently.
Email: [email protected] Support Web Site
Vetting Department
Fax your vetting documents to your regional office
Tel US: 866 511 5035 Email: [email protected]
Fax vetting documents to: Fax US: 617 830 0779
Vetting Department
Fax your vetting documents to your regional office
Tel EU English speaking: +44 1622 766766 Tel EU Non-English speaking: +32 16 891900 Email: [email protected]
Fax vetting documents to: Fax EU: +32 16 79 52 30
2. Contents Section Page 1. Useful numbers and answers to FAQ’s ................................................................................................................................................. 2 2. Contents ................................................................................................................................................................................................ 2 3. General Principles:- Why should I use my Retail Account?:- ........................................................................................................... 3 4. General Principles:- How to use this User Guide:- ................................................................................................................................. 3 5. General Principles:- The Retail Account Screen Layout and callout styles:- ......................................................................................... 3 6. General Principles:- The Retail Purchase Process Process:- .................................................................................................................. 4 7. DomainSSL:- The Purchase Process – Certificate Selection ............................................................................................................ 5 8. DomainSSL:- The Purchase Process – Account Setup .......................................................................................................................... 6 9. DomainSSL:- The Purchase Process – CSR Entry ................................................................................................................................... 7 10. DomainSSL:- The Purchase Process – Approver Email page ............................................................................................................... 8 11. DomainSSL:- The Purchase Process – Application end user information ............................................................................................ 8 12. DomainSSL:- The Purchase Process – SAN Support .............................................................................................................................. 9 13. DomainSSL:- The Purchase Process – The Approver e-mail. ................................................................................................................ 9 14. OrganizationSSL:- The Purchase Process – Certificate Selection ................................................................................................. 10 15. OrganizationSSL:- The Purchase Process – Account Setup ................................................................................................................ 11 16. OrganizationSSL:- The Purchase Process – CSR Entry ......................................................................................................................... 12 17. OrganizationSSL:- The Purchase Process – Application end user information .................................................................................. 13 18. DomainSSL:- The Purchase Process – SAN Support ............................................................................................................................ 13 19. OrganizationSSL:- The Purchase Process – Seal profile information entry ........................................................................................ 14 20. Retail Account Configuration :- The Account Administrator Menu:- ........................................................................................... 15 21. General Principles:- Delegated Administration:- ................................................................................................................................ 16 22. Certificate Management – New Certificate Application ..................................................................................................................... 17 23. Certificate Management –Certificate Application History .................................................................................................................. 18 24. Certificate Application History – Edit Certificate Details .................................................................................................................... 19 25. Certificate Management –Pending Certificate Approvals .................................................................................................................. 20 26. Upgrading to an SSL Managed Service Account ............................................................................................................................ 20 27. Deposit Management - Create Bulk Order & Add Deposit ................................................................................................................. 21 28. Additional information:- ...................................................................................................................................................................... 22 29. GlobalSign Root Certificates:- ............................................................................................................................................................. 22
©
2007 GlobalSign
3. Gen This guide you will be
Compland rev
A bendiscouGlobal
No infrmanag
Advan
Approvalerts s
Full bilauthor
Compr
XML baAccount ad
A beneDomai
4. Gen This user gthe followi
Role Symb
5. Gen
n Ltd.
neral Prin
highlights how e provided an Ac
lete Certificate livocation across
efit of an Accounts - no service fSign competito
rastructure or pege certificates
nced Delegated
val based modesent to Approve
ling managemerization
rehensive report
ased API to allowdministrators a
efit of Pre-vettinin). Organization
neral Prin
guide has been sng symbols are
bol
Account owner thato amendStaff in Ch
Manager the Accouthe accoufurther sucertificate
Staff – Weither thelevels Stafaccount, additiona
Billing Ccreated tobilling info
neral Prin
GAS (Global
ciples:- W
to use the Globaccount which off
ifecycle manage many departme
nt is that purchafees and the abir
ersonnel overhe
Administration -
el - Administrators)
ent - view and do
ting and auditin
w full integrationalso have the po
g of domains allnSSL certificates
ciples:- H
structured to foused to illustrat
Descriptio
Administrator at can see all m
d or create a hieharge
– With adminisunt Administratount, a Manager ub level and de approval and d
With administrae Account Adminff members hava Staff memb
l account users.
ontact – A seo receive confirormation.
ciples:- Th
Menu
InforWind
Agent System
Why should
al Agent Systemfers the followin
ement – With a reents.
asing all certificaility to save cons
ad - GlobalSign
- administrator c
r and users with
ownload invoice
g functions - rep
n with enterpriseossibility to upg
lows for instant s can then be pro
How to use
llow the procese the menus and
on of Role
– The top levelenus and has th
erarchy of Mana
tration rights deor and a unique is also able to
delegate tasks ideposit authoriza
ation rights denistrator or the
ve a unique log-ber cannot cre
eparate contactmation informa
he Retail
u Items
mation dow
GAS
m) – User Guide
d I use my
m to purchase a cg benefits:-
etail account yo
ates through a cosiderable budge
runs the WebTr
creates users ba
Approver privil
es and automatic
port on spend, c
e purchasing sysgrade to an SSL
issuance to any ovisioned instan
e this User
s of applying fod permissions:-
PeS
account he ability
agers and
efined by log-in to create a including ation
fined by manager -in to the eate any
Papp
t can be ation and
Account S
Throughointerest. F Important
(Global Ag
e – Retail Cert
y Retail Ac
certificate throug
u can control th
ommon interfacet compared to b
ust certified cert
sed on roles and
eges decide wh
cally create new
certificates, upco
stems L Managed Serv
domain or sub-dntly. (To upgrad
r Guide:-
or a retail certific
rmission Symbol
CeAdpeMa
DeAdpeMa
Sy
Please note that proval permissio
Screen Lay
out this guide caFor example:-
t points are high
ent SystemEditi
ificate Issuanc
ccount?:-
gh the retail web
e application, is
ce provides the pbuying certificat
tificate factory, e
d assigns approp
ether applicatio
w downloadable
oming renewals,
vice account wh
domain under thde the account, p
cate. In order t
Description
ertificate Approdministrator
rmissions, howeanagers and/or S
eposit Authorizdministrator h
rmissions, howeanagers and/or S
ystem Default A
Only the Accou
ons to approve pto deposit addi
yout and
allouts are used
hlighted with Red
Example
Important P
m) – User Guiion 1.2 –Oct
ce
b site. As part o
suance, re-issua
possibility of enhes separately or
enterprises just l
priate privileges
ons should be iss
"quotes" for inte
etc
hich provides th
he main TLD (Toplease see Sectio
o better unders
n of Approval/Pe
oval – By defauhas certifica
ever these can Staff
zation – By defahas Deposit ever these can Staff
Approval level:-
unt Administratpending certificational funds.
callout st
d to highlight s
d callouts. Point Example
ide – Retail tober 2007
Page 3 of
of the process
ance, renewal
hanced from a
log in and
sued (email
ernal
he following:-
op Level on 26)
tand the guide
ermission
ult the Accounate approvabe delegated to
ault the AccounAuthorization
be delegated to
tor has default ate requests and
tyles:-
pecific points o
f 23
t al o
t n o
d
of
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 4 of 23
6. General Principles:- The Retail Purchase Process:- The purchase process for a certificate is highlighted in the diagram below. Either a DomainSSL or an OrganizationSSL certificate can be purchased through the retail web site. The majority of the processes are similar with the exception of the vetting and authentication stages (Step 5 below). Please note that a DomainSSL certificate can be purchased and issued in several minutes, where as an OrganizationSSL certificate can take 2-3 working days.
Sign Up Follow on
orders Detailed Description Page Reference in this manual
1 1 1 1
A CSR (Certificate Signing request) is required from either your hosting provider if you have a managed service, or it can be
created from your web hosting control panel. For more details on creating CSR’s please review:-
https://www.globalsign.com/support/index.html
(web link to external resource)
2 2
The process is initiated from
inside the account
2 2
Please select the appropriate purchase link from the web site and select the appropriate features, such as duration, number of licenses and support for SAN (Subject Alternative Name). At
this point either DomainSSL or OrganizationSSL may be chosen
Section 7 on Page 5 for DomainSSL and Section 14 on Page 10 for OrganizationSSL
3 3 Account
creation skipped Provide the details for the Account Administrator, selecting
username and password etc.
Section 8 on Page 6 for DomainSSL and Section 15 on Page 11 for OrganizationSSL
4 4 4 4
Paste the CSR and if appropriate customize the ‘valid from’ and ‘valid to’ dates. You will also be asked for payment
information.
Section 9 on Page 7 for DomainSSL and Section 16 on Page 12 for OrganizationSSL
5 5
For DomainSSL certificates a challenge response e-mail will be sent. Once the e-mail has been received the e-mail will direct you to a web page where domain ownership can be verified.
Section 10 on Page 8
6 6
A DomainSSL certificate will be issued once the challenge response has been completed and payment has been
collected.. Section 13 on Page 9
5
If the organization is the same this
may be skipped
It may be possible for GlobalSign to authenticate the organization information in the CSR from a DUNS number
provided. If not, GlobalSign may require additional proof of incorporation.
Section 17 on Page 13
6 6
An OrganizationSSL certificate together with a site seal will be issued once the challenge response has been completed and
payment has been collected.. Section 19 on Page 14
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 5 of 23
7. DomainSSL:- The Purchase Process – Certificate Selection A DomainSSL certificate offers a simple, quick and easy way to secure a FQDN (Fully Qualified Domain Name). The process to purchase a DomainSSL is highlighted opposite. Please note that you will need a CSR to complete Step 1 (Certificate Signing Request). For more information on how to generate a CSR, please review the GlobalSign support web site for details. https://www.globalsign.com/support/index.html
Certificate Selection
• Product DomainSSL
• SSL Certifiacte Type Please select the type of SSL Certificate
Standard SSL issued to a single Fully Qualified Domain Name only
Wildcard SSL issued to "*.domain.com"
Standard SSL with SANs (Subject Alternative Names) issued to a single Fully Qualified Domain Name and up to three internal server names e.g. "server1"
• Number of Licences Our current promotion gives you 3 licenses per license block below,
e.g. selecting "1" gives you 3 licenses, "2" gives you 6 licenses
• Certificate Validity Period & Customization of Start & End Date Check if you require the certificate to be valid from a specific date.
Leave blank and the certificate will be valid upon completion of vetting. Year Price
Six months XXX
1 year XXX
2 years XXX
3 years XXX
4 years XXX
5 years XXX
Customization period XXX
• Is this order New or transfer
Renewal
Switching from a competitor
• Campaign Code If you have a campaign code, please enter here
• Coupon Code If you have a coupon code, please enter here
• Option • Amount tax included
XXX
Please do not use your browser back button. To return to past pages click Back within the page body.
Completing this form moves you on to the Account set-up process where the account administrator is set up. Full details of the DomainSSL product are located here:- http://www.globalsign.com/digital_certificate/domain/index.htm
Setting the Customization Period will allow you to
modify the issue date and expiry date of your SSL
certificate. The rules for this are highlighted later on.
Standard SSL Please note you will need one IP per SSL certificate
Server Example domains that can be hosted Notes
Single Server,
Single IP
www.domain.com www.domain.co.uk www.domain.net
(Assume shared IP)
If a single IP address is allocated to this server, then only a single SSL
certificate can be installed to secure ONE
domain.
Single Server,
Single IP
www.domain.com
secureserver payroll
server1234
If a single IP address is allocated to this server,
then internal server names can be
supported with the SAN option.
Single Server, Multiple IPs
www.domain.com www.domain.co.uk www.domain.net
If multiple IP addresses
are allocated to this server, then a single SSL certificate per IP can be
installed.
Wildcard SSL
Server Example domains that can be hosted
Notes
Single Server,
Si l IP
www.domain.com
secure.domain.com news.domain.com
If a single IP address is allocated to this server,
then all sub-domains can be secured with SSL
©
2007 GlobalSign
8. Dom The Accoucontact ma
A
SumPleabelo
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
CerPlea
•
•
•
•
•
•
•
•
etc
n Ltd.
mainSSL:-
nt is set-up by eay be included.
Account Setu
mmary - Organizase verify your organow, you will experienc
Organization Na
Business type
VAT Number
Street Address 1
Street Address 2
City
State or County
Zip Code / Posta
Country
Other address in
Time zone
Telephone (inc.
Fax (inc region c
DUNS (if availab
How did you heGlobalSign?
rtificate Applicatase detail the person /
User ID
Password
Confirm Passwo
Department
First Name
Last name
Job Title
Email Address
c
Plea
GAS (Global
- The Purc
ntering details aAll items in RED
p
zation Details ization details. By ence the best service fro
ame
1
2
y
al Code
nfo
region code)
code)
ble
ear about
tion Details / company making th
ord
ase do not use you
Agent System
chase Proc
about the organ are mandatory.
suring the accuracy oom your Global Agent
e.g. GlobalSign I
he application.
Click if your TechOrganization De
*Please check yo
ur browser back b
GAS
m) – User Guide
cess – Acc
ization, followed. Please enter th
of the information yot System (GAS) SSL M
nc
hnical Contact detetails.
our email address h
button. To return to
(Global Ag
e – Retail Cert
count Setu
d by details of thhe information c
ou have provided to anaged Service accou
ails as the same as
has been entered c
o past pages click
Pressinfor
servi
ent SystemEditi
ificate Issuanc
up
he account admarefully and acc
us in the summary unt.
s your
correctly
k Back within the p
This is w
The can be clfrom the
If no VAT nuin your
Although thensure this i
Ac
sing prrmation entered
ce. You must se
m) – User Guiion 1.2 –Oct
ce
inistrator. A opturately.
page body.
where you create
For the Please
to proensure
icked to copy th section above
umber is enteredcountry, you wi
his can be enteres correct during
An optional billican be added by
check box of Application Deand entering ne
resents a summa, and also the GA
elect to
ide – Retail tober 2007
Page 6 of
tional billing
e the Account d
Account admin use a strong pasotect the accoune the e-mail add
correct.
buhe organisation d
d and VAT is appll be charged VAed later it is advi
g the initial appli
ng contact leaving the ‘same as tails’ clear ew details
ary of the AS terms of
o continue.
f 23
details:-
istrator. ssword
nt and dress is
utton details
plicable AT. ised to cation.
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 7 of 23
9. DomainSSL:- The Purchase Process – CSR Entry A CSR (certificate Signing Request) is one of the most important requirements in the SSL purchase process. The CSR forms the basis of the certificate that GlobalSign will eventually send back to you once the process is complete. Please ensure the CSR you submit in this section is created using the web server you intend to use the SSL certificate on so that the public and private keys match when you install the final certificate. The GAS system will parse the CSR and show you the information on the next confirmation screen
DomainSSL application CSR entry
• Contract Period 3 years
• Customization Period
• Certificate Signing
Request ( CSR ) Generating a CSR and paste into the form. Make sure that your CSR contains the complete header and footer "BEGIN" and "END" lines. For assistance on generating your CSR, please click here
-----BEGIN CERTIFICATE REQUEST----- MIIB8jCCAVsCAQAwgbExCzAJBgNVBAYTAkdCMRMw EQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlT b21lIENpdHkxIDAeBgNVBAoTF0FuIGV4YW1wbGUg T3JnYW5pc2F0aW9uMRUwEwYDVQQLEwxBIGRlcGFy dG1lbnQxFzAVBgNVBAMTDnd3dy5kb21haW4uY29t MScwJQYJKoZIhvcNAQkBFhhleGFtcGxlLWVtYWls QGRvbWFpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMStAPbTlAbejGojLQ9YnMz5951C iMt04kh+gS5DzPqcLBsXuvGIx5lYV/QY9be07w3/ FNSwQ+naT/9abKq+0WJxz7oTXJYGXjGEpbf9JYZm lHRUnBUB783DfAJIIv6frA8Edmqh4rTgKavg9UF8 t7IItqqXE+Gxwgih5xb5dgYZAgMBAAGgADANBgkq hkiG9w0BAQUFAAOBgQBzbkT07Vo50WaKDrjFsxQH RWsZnXBLZSLQjc0K/PJCXeZ3eta4teNHOYy0XiVU g6I7/gaSSIg1yqRkZUslVngYDKOQ9nw9HZ0g3LQg CdvuhkXgwggawvBgnKrcl2oH84FQHZN/otaBm1sI CGmw5EEF2s31mmcs+ouX2ECGvNdWKA== -----END CERTIFICATE REQUEST-----
Please do not use your browser back button. To return to past pages click Back within the page body.
Certificate customization is a powerful tool to ensure that new certificates ordered from the account can be customized to start or finish on a particular date. This allows for certificates to be synchronized with billing cycles and/or the expiry dates of other certificates already being used. Every certificate type has a Valid from and a Valid to date. The refund policy of the certificate will determine how close to the application date the Valid from date can be set. For example 3 days for a DomainSSL. Please note that the GAS system will automatically allow for a Leap year and provide a 366 day certificate if necessary.
If Customization Period was selected on the previous page, then the issue date
and expiry date of the certificate can be customized. (Please see the rules below)
Please remember that country codes are 2 digit codes. For example
United States = US, France = FR and United Kingdom = GB (Not UK)
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 8 of 23
10. DomainSSL:- The Purchase Process – Approver Email page The challenge response e-mail will be sent to the contact you select from this page. Only approved domain administrator e-mails can be used. GlobalSign will interrogate the whois record to ensure the correct e-mails are made available. You must be able to reply to this e-mail address for the challenge response to succeed. Alternative methods of validation are possible if none of the e-mails are suitable. – Please contact GlobalSign.
Approver Email page
In order to proceed with your SSL certificate application you must select an appropriate Approver
Email address. We will send an Approval Email to the address you select. The email address selected must be capable of receiving the Approval Email. To make sure you receive the Approver Email quickly and trouble free: - Make sure you check spam filters in case the Approver Email is marked as spam - Make sure you select a live address that is capable of receiving email
etc
Please do not use your browser back button. To return to past pages click Back within the page body.
11. DomainSSL:- The Purchase Process – Application end user information
DomainSSL application end user information entry
• Retrieve previous order details set from your registed user info
Contact Information
• First Name
• Last Name
• Telephone (inc. region code)
• Email Address
• Organisation name
• Department
• Set Point of Contact Check here to set this user as the point of contact
• Set E-mail Address Check here to set this email address as the recipient of all GlobalSign automated emails
Other Information and Special Instructions if you have any additional instructions please state them here
• Special Instructions
Select Payment Method
• Payment Details Credit card
Please do not use your browser back button. To return to past pages click Back within the page body.
GlobalSign will verify the domain exists and present a set of standard administrator e-mail addresses, GlobalSign will also look at the Who-is record for the domain and present these as alternative options. Please ensure you will be able to respond to a challenge response e-mail for this domain.
Important – Check this box if you wish to be the point of contact for e-mail alerts that the SSL certificate is due to expire; otherwise the Account Administrator will receive the alerts. (30 days before, 7 days before and 1 day before)
Important – The initial purchase must be made by credit card. Once the account is set up other options will be made available.
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 9 of 23
12. DomainSSL:- The Purchase Process – SAN Support Without SAN (Subject Alternative Name) support, an SSL certificate would only support a single IP address or FQDN (Fully Qualified Domain Name), however more recent browsers are able to use the SAN functionality to allow multiple servers to be secured. GlobalSign offers the ability for 3 alternative internal servers to be included.
• Set Point of Contact Check here to set this user as the point of contact
• Set E-mail Address Check here to set this email address as the recipient of all GlobalSign automated emails
Other Information and Special Instructions if you have any additional instructions please state them here
• SubAltName1
• SubAltName2
• SubAltName3
• Special Instructions
13. DomainSSL:- The Purchase Process – The Approver e-mail. A DomainSSL certificate offers a simple, quick and easy way to secure a FQDN (Fully Qualified Domain Name). The process involves replying to a ‘challenge response’ e-mail to verify ownership of a domain. An approver e-mail will be sent to the e-mail address chosen in section 10. When the e-mail is received the recipient should verify all information in the e-mail especially the domain. Clicking on the link in the mail will direct you to a web page where an ‘I APPROVE’ or ‘I DO NOT APPROVE’ selection can be made. Selecting I APPROVE will provide a confirmation screen and e-mail the completed SSL certificate to the e-mail address of the applicant.
If SAN support was selected during the initial certificate
selection, you have the opportunity to add up to three alternative internal
server names here.
Examples of Internal Server names are:-
• 192.168.2.1 • Server1
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 10 of 23
14. OrganizationSSL:- The Purchase Process – Certificate Selection An OrganizationSSL certificate contains information on who owns the domain and web server hosting the SSL session. During the process there is a possibility that you will be required to submit business documentation. OrganizationSSL certfiiactes can take 2-3 business days to issue due to the extended vetting process. Please note that you will need a CSR during the application process (Certificate Signing Request). For more information on how to generate a CSR, please review the GlobalSign support web site for details. https://www.globalsign.com/support/index.html
Certificate Selection
• Product OrganizationSSL
• SSL Certifiacte Type Please select the type of SSL Certificate
Standard SSL issued to a single Fully Qualified Domain Name only
Wildcard SSL issued to "*.domain.com"
Standard SSL with SANs (Subject Alternative Names) issued to a single Fully Qualified Domain Name and up to three internal server names e.g. "server1"
Public IP address SSL Issued to a publically accessible IP address
• Number of Licences Our current promotion gives you 3 licenses per license block below,
e.g. selecting "1" gives you 3 licenses, "2" gives you 6 licenses
• Certificate Validity Period & Customization of Start & End Date Check if you require the certificate to be valid from a specific date.
Leave blank and the certificate will be valid upon completion of vetting. Year Price
Six months XXX
1 year XXX
2 years XXX
3 years XXX
4 years XXX
5 years XXX
Customization period XXX
• Is this order New or transfer
Renewal
Switching from a competitor
• Campaign Code If you have a campaign code, please enter here
• Coupon Code If you have a coupon code, please enter here
• Option • Amount tax included
XXX
Please do not use your browser back button. To return to past pages click Back within the page body.
Completing this form moves you on to the Account set-up process where the account administrator is set up. Full details of the OrganizationSSL product are located here:- http://www.globalsign.com/digital_certificate/serversign/index.htm
Pressing CONTINUE moves to the Account set-up process.
Setting the Customization Period will allow you to
modify the issue date and expiry date of your SSL
certificate. The rules for this are highlighted on the
following page.
Standard SSL Please note you will need one IP per SSL certificate
Server Example domains that can be hosted
Notes
Single Server,
Single IP
www.domain.com www.domain.co.uk www.domain.net
(Assume shared IP)
If a single IP address is allocated to this server, then only a single SSL
certificate can be installed to secure ONE
domain.
Single Server,
Single IP
www.domain.com
secureserver payroll
server1234
If a single IP address is allocated to this server,
then internal server names can be
supported with the SAN option.
Single Server, Multiple IPs
www.domain.com www.domain.co.uk www.domain.net
If multiple IP addresses
are allocated to this server, then a single SSL certificate per IP can be
installed.
Wildcard SSL
Server Example domains that can be hosted Notes
Single Server,
Single IP
www.domain.com
secure.domain.com news.domain.com
If a single IP address is allocated to this server,
then all sub-domains can be secured with SSL
Public IP address SSL (Not available under DomainSSL)
Server Example domains that can be hosted
Notes
Single Server,
Single IP
211.0.153.53
212.113.70.26
Again as with the
standard SSL, if a single IP address is allocated to
this server, then only a single SSL certificate can
be installed to secure ONE Public IP
It is possible to validate the ownership of a public IP address with an OrganizationSSL certificate. This will be done through verification of a web page change. The GlobalSign vetting team will provide instructions
©
2007 GlobalSign
15. The Accoucontact ma
A
SumPleabelo
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
CerPlea
•
•
•
•
•
•
•
•
etc
n Ltd.
Organiza
nt is set-up by eay be included.
Account Setu
mmary - Organizase verify your organow, you will experienc
Organization Na
Business type
VAT Number
Street Address 1
Street Address 2
City
State or County
Zip Code / Posta
Country
Other address in
Time zone
Telephone (inc.
Fax (inc region c
DUNS (if availab
How did you heGlobalSign?
rtificate Applicatase detail the person /
User ID
Password
Confirm Passwo
Department
First Name
Last name
Job Title
Email Address
c
Plea
GAS (Global
tionSSL:-
ntering details aAll items in RED
p
zation Details ization details. By ence the best service fro
ame
1
2
y
al Code
nfo
region code)
code)
ble
ear about
tion Details / company making th
ord
ase do not use you
Agent System
The Purch
about the organ are mandatory.
suring the accuracy oom your Global Agent
e.g. GlobalSign I
he application.
Click if your TechOrganization De
*Please check yo
ur browser back b
GAS
m) – User Guide
hase Proc
ization, followed. Please enter th
of the information yot System (GAS) SSL M
nc
hnical Contact detetails.
our email address h
button. To return to
(Global Ag
e – Retail Cert
cess – Acco
d by details of thhe information c
ou have provided to anaged Service accou
ails as the same as
has been entered c
o past pages click
Pressinfor
servi
ent SystemEditi
ificate Issuanc
ount Setu
he account admarefully and acc
us in the summary unt.
s your
correctly
k Back within the p
The can be clicfrom the se
If no VAT nuin your
Although thensure this i
Ac
sing prrmation entered
ce. You must se
Importanplease en
organizaticertificate
m) – User Guiion 1.2 –Oct
ce
p
inistrator. A opturately.
page body.
These Acco
Plepasswo
cked to copy theection above
umber is enteredcountry, you wi
his can be enteres correct during
An optional billican be added by
check box of Application Deand entering ne
resents a summa, and also the GA
elect to
nt Tip: If you hanter it here. Doinional vetting pro
e to be issued in
ide – Retail tober 2007
Page 11 o
tional billing
are the details oount administratease use a stronord and ensure tl address is corre
but organisation de
d and VAT is appll be charged VAed later it is advi
g the initial appli
ng contact leaving the ‘same as tails’ clear ew details
ary of the AS terms of
o continue.
ve a DUNS numng so will speedocess and allow a shorter timefra
of 23
of the tor. g the e-ect.
tton etails
plicable AT. ised to cation.
ber, the your ame.
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 12 of 23
16. OrganizationSSL:- The Purchase Process – CSR Entry A CSR (certificate Signing Request) is one of the most important requirements in the SSL purchase process. The CSR forms the basis of the certificate that GlobalSign will eventually send back to you once the process is complete. Please ensure the CSR you submit in this section is created using the web server you intend to use the SSL certificate on so that the public and private keys match when you install the final certificate. The GAS system will parse the CSR and show you the information on the next confirmation screen
OrganizationSSL application CSR entry
• Contract Period 3 years
• Customization Period
• Certificate Signing
Request ( CSR ) Generating a CSR and paste into the form. Make sure that your CSR contains the complete header and footer "BEGIN" and "END" lines. For assistance on generating your CSR, please click here
-----BEGIN CERTIFICATE REQUEST----- MIIB8jCCAVsCAQAwgbExCzAJBgNVBAYTAkdCMRMw EQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlT b21lIENpdHkxIDAeBgNVBAoTF0FuIGV4YW1wbGUg T3JnYW5pc2F0aW9uMRUwEwYDVQQLEwxBIGRlcGFy dG1lbnQxFzAVBgNVBAMTDnd3dy5kb21haW4uY29t MScwJQYJKoZIhvcNAQkBFhhleGFtcGxlLWVtYWls QGRvbWFpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMStAPbTlAbejGojLQ9YnMz5951C iMt04kh+gS5DzPqcLBsXuvGIx5lYV/QY9be07w3/ FNSwQ+naT/9abKq+0WJxz7oTXJYGXjGEpbf9JYZm lHRUnBUB783DfAJIIv6frA8Edmqh4rTgKavg9UF8 t7IItqqXE+Gxwgih5xb5dgYZAgMBAAGgADANBgkq hkiG9w0BAQUFAAOBgQBzbkT07Vo50WaKDrjFsxQH RWsZnXBLZSLQjc0K/PJCXeZ3eta4teNHOYy0XiVU g6I7/gaSSIg1yqRkZUslVngYDKOQ9nw9HZ0g3LQg CdvuhkXgwggawvBgnKrcl2oH84FQHZN/otaBm1sI CGmw5EEF2s31mmcs+ouX2ECGvNdWKA== -----END CERTIFICATE REQUEST-----
Please do not use your browser back button. To return to past pages click Back within the page body.
Certificate customization is a powerful tool to ensure that new certificates ordered from the account can be customized to start or finish on a particular date. This allows for certificates to be synchronized with billing cycles and/or the expiry dates of other certificates already being used. Every certificate type has a Valid from and a Valid to date. The refund policy of the certificate will determine how close to the application date the Valid from date can be set. For example 7 days for an OrganizationSSL. Please note that the GAS system will automatically allow for a Leap year and provide a 366 day certificate if necessary.
If Customization Period was selected on the previous page, then the issue date
and expiry date of the certificate can be customized. (Please see the rules below)
Please remember that country codes are 2 digit codes. For example
United States = US, France = FR and United Kingdom = GB (Not UK)
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 13 of 23
17. OrganizationSSL:- The Purchase Process – Application end user information
OrganizationSSL application end user information entry
• Retrieve previous order details set from your registered user info
Contact Information
• First Name
• Last Name
• Telephone (inc. region code)
• Email Address
• Organisation name
• Department
• Set Point of Contact Check here to set this user as the point of contact
• Set E-mail Address Check here to set this email address as the recipient of all GlobalSign automated emails
Other Information and Special Instructions if you have any additional instructions please state them here
• Special Instructions
Select Payment Method
• Payment Details Credit card
Please do not use your browser back button. To return to past pages click Back within the page body.
18. OrganizationSSL:- The Purchase Process – SAN Support Without SAN (Subject Alternative Name) support, an SSL certificate would only support a single IP address or FQDN (Fully Qualified Domain Name), however more recent browsers are able to use the SAN functionality to allow multiple servers to be secured. GlobalSign offers the ability for 3 alternative internal servers to be included.
• Set Point of Contact Check here to set this user as the point of contact
• Set E-mail Address Check here to set this email address as the recipient of all GlobalSign automated emails
Other Information and Special Instructions if you have any additional instructions please state them here
• SubAltName1
• SubAltName2
• SubAltName3
• Special Instructions
Important – Check this box if you wish to be the point of contact for e-mail alerts that the SSL certificate is due to expire; otherwise the Account Administrator will receive the alerts. (30 days before, 7 days before and 1 day before)
Important – The initial purchase must be made by credit card. Once the account is set up other options will be made available.
If SAN support was selected during the initial certificate
selection, you have the opportunity to add up to three alternative internal
server names here.
Examples of Internal Server names are:-
• 192.168.2.1 • Server1
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 14 of 23
19. OrganizationSSL:- The Purchase Process – Seal profile information entry
An OrganizationSSL certificate features the option to display a clickable Site Seal. The primary function of a site seal is to show visitors you are a secure site. The GlobalSign Site seal is
a sign of trust on the Internet. It shows your customers you have been authenticated and you use the strongest SSL possible to secure your transactions. Displaying the GlobalSign Site Seal will help visitors trust your web site, and then help convert general visitors to paying customers. For more information on displaying the site seal, please review the information on this page :- http://www.globalsign.com/support/ssl-site-seal.html The data which appears on your site seal is input during the next section of the application process.
OrganizationSSL application seal profile information entry
• Retrieve previous order
details set from your Corporate info
Seal Information The below details will be shown in your Web Site Profile presented to your web site visitors click on the Secured by GlobalSign Secure Site Seal. Some information on this page cannot be edited – this information is taken from your Certificate Signing Request (CSR). To maximize trust in your site, please ensure this information is as complete and accurate as possible.
• Organization Name XXXXXXXXXXXXXXX
• Street Address 1 * If you have provided the
information in the 'City' entry ( This is extracted from the CSR )
you do not need to fill this.
e.g. 6 Kings Row
• Street Address 2 * If you have provided the
information in the 'City' entry ( This is extracted from the CSR )
you do not need to fill this.
e.g. Armstrong Road
• City XXXX
• State or County XXXX
• Post/Zip code / Postal Code
e.g. Marketing
• Country XX
• Other address info
• Telephone(inc, region code)
e.g. +44 ( 0) 1622 766766
• Fax(inc, region code)
e.g. +44 ( 0) 1622 662255
Authentication information
• DUNS (if available)
Select Payment Method
• Payment Details Credit card
Certain information within this screen will be fixed. (indicated as XXXX in the diagram below. This information will be validated by GlobalSign during the vetting process.
Once the credit card information has been entered and the terms and conditions have been accepted, GlobalSign will send a confirmation e-mail to the account administrator. The final confirmation screen will show a username for the account and a confirmation of the order number for the certificate. The status of the order can be monitored in the ‘Certificate Application History’ menu item. To view this menu you will need to log in to the account. The Account functions and menu items are discussed in more detail on the following pages.
Important Tip: If you have a DUNS number, please enter it here. Doing so will speed the organizational
vetting process and allow your certificate to be issued in a shorter timeframe.
©
2007 GlobalSign
20. R
WAd
The login p
Men
CertificaNew CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Order Add SSL AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out
The Ma
Theme
The Sta
Thethe
The remaincertificatesGlobalSign
n Ltd.
Retail Acc
When you first lAccount Adminisdisabled. For exa
page for all users
nu
ate Management rtificate Applicatio
ate Application Hisg Certificate Appro
Management Bulk Order posit
naged Service SSL Managed S
L Managed Service
ting & Billing equest Invoices
t Management Company Details
e Users Administrator Billing Manager
istory mail
t Snapshot
t
Plea
anager Me
e menu for manenu items shown
aff in Cha
e menu for Staffe menu items sh
ning pages of ths and also to addn’s need to conti
GAS (Global
count Con
og in to the systrator will incluample ‘Manager
s is https://syste
on story ovals
Service Bulk
e Deposit
ase do not use you
enu:
agers will vary dn above.
rge Menu
f members will vown above.
is user guide disd additional fundnually improve t
Ts
Agent System
nfiguratio
ystem you will bude all the areas rs’ and ‘Members
m.globalsign.co
Welcome tomanaging al Please use applicationsdetails up to Keep checkResources ana GlobalSign
ur browser back b
depending upon
:
vary depending u
scuss each menuds to the accounthe GAS system
These last three mnapshot of the a
GAS
m) – User Guide
on :- The A
be presented w highlighted bes of Staff’ canno
om/loginpartner
the GlobalSign pall your Certificate a
the links on the s and manage exo date.
ing back to the nd Sales Guides ann partner.
button. To return to
n the permission
upon the permis
u item and highlnt. Please note t based on custo
These certificother u
The Acwithin contac
menu items allowaccount (Funds a
The Acaccoun
The Acand ma
These the accBulk Oif total
IMPORaccoun
(Global Ag
e – Retail Cert
Account Ad
with the main Alow. For delegat Amend Compa
_en/loginpartne
artner Global Ageand account requir
left to make addisting application
GAS as we'll shond of course Gener
o past pages click
ns set by the Acc
ssions set by the
light what actionhat there may smmer feedback an
menu items allocate types. Theusers in the acco
ccount Administ the account (i.e
ct can also be ch
w you to view thand critical expi
ccounting & Billinnt activity.
ccount Administanage the perm
menu items allocount either for
Order wizard, or future certificat
RTANT - Add funnt will be change
ent SystemEditi
ificate Issuanc
dministra
Administration Mated administratany Details.
er.do
nt System (GAS). Grements.
d credit to your as, download invo
rtly be adding Nral Hints and Tips t
k Back within the p
ount Administra
e Account Admin
ns need to be tamall changes in nd our own ong
ow the Account A approval capab
ount. (See the Ma
trator can relinque. either Manage
anged here.
he E-mail historyry dates) and the
ng function pres
trator can correcissions of other
ow the Account Aa specific numb
r to simply add ate requirements
nds via this mened to a Manage
m) – User Guiion 1.2 –Oct
ce
ator Menu
Menu, which bytors some of the
GAS is your dashb
account, make neoices, and keep y
ews, Offers, Partnto making the mos
page body.
ator. It will be a
nistrator. It will
ken to order/ap functionality. T
going improvem
Administrator tobilities can also banaging Users)
uish the role to ar or Staff). The o
y in the account,e sign out of the
sents a summary
ct or amend com users on the acc
Administrator tober of certificatesa Deposit amoun are unknown).
u item instead aedSSL account.
ide – Retail tober 2007
Page 15 o
:-
y default for an e menus will be
oard portal to
ew Certificate your company
ner Marketing st out of being
subset of the
be a subset of
prove/cancel his is due to ent plans.
o apply for new be delegated to
another user optional Billing
, view a e system.
y of the
mpany details count.
o add credit to s using the nt (for example,
and the
of 23
©
2007 GlobalSign
21. It is importcreate a defuture it aarchitectur
Men Certifica
New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate SBulk OrdAdd SSDeposit AccountView/Re AccountAmend ManageChange Change E-mail hView em Account Sign out
n Ltd.
General P
tant to determinelegated adminlways pays to
res that GAS is ca
nu
ate Management rtificate Applicatio
ate Application Hisg Certificate Appro
Management Bulk Order posit
naged Service SSL Managed Servder SL Managed Serv
ting & Billing equest Invoices
t Management Company Details
e Users Administrator Billing Manager
istory mail
t Snapshot
t
P
GAS (Global
Principles:
ne the structure istration hierarcremember the apable of suppo
Ma
on story ovals
vice
vice
Edit
Please do not use
Once new userallows the propamended. Anyor that of users
Agent System
:- Delegat
and the permisschy within the Gmotto ‘measure
orting.
anage Users
t User ID
Full name
xxx xxx x
xxxx
xx xx
xxxx
xx xx
xxxx
e your browser bac
rs have been creperties and detay user can edit eis below it.
GAS
m) – User Guide
ted Admin
sion levels you wGAS system. Ale twice, cut onc
e
Department name
x x
xxxxxxxxxx
x xxxxx xxx
x xxxxxxxxxxx
ck button. To retu
ated, the edit buils for each user ither it’s own de
(Global Ag
e – Retail Cert
nistration
wish to create asthough it is pos
ce’. Below are t
Official position
Zipcod
xx xxxx x
xx x
xx x x
rn to past pages c
utton to be tails
To adbuttothe n
ent SystemEditi
ificate Issuanc
n:-
s a Account Admssible to edit ththree examples
p de
Address T
xxx xx x xxxx
xxx xxx xxxxxxxx
xxxxxxx xxxx
click Back within th
dd new users clicon and completeext page.
m) – User Guiion 1.2 –Oct
ce
ministrator beforhe permissions fs of Delegated
TEL Email address
xx xxxx
xx xxxx
xx xxxx
he page body.
ck on the e the web form a
ide – Retail tober 2007
Page 16 o
re you begin to for users in the Administration
User permissions
Administrator
Manager
Staff in Charge
as shown on
of 23
©
2007 GlobalSign
Men Certifica
New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Order Add SSL AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out
22.
FO
n Ltd.
nu
ate Management rtificate Applicatio
ate Application Hisg Certificate Appro
Management Bulk Order posit
naged Service SSL Managed S
L Managed Service
ting & Billing equest Invoices
t Management Company Details
e Users Administrator Billing Manager
istory mail
t Snapshot
t
Plea
Certificat
For all users, clicOrganizationSSL
GAS (Global
on story ovals
Service Bulk
e Deposit
ase do not use you
te Manage
cking on the NewL to be purchase
Agent System
New use
• User ID
• Password
• Password
• Organiza
• Departme
• First Nam
• Last Nam
• Job Title
• Street Ad
• Street Ad
• City
• State or C
• Zip Code
• Other add
• Telephon
• Fax (inc. r
• Email Add
• User perm
• E-mail a U
• Certifiact
• Deposit P
ur browser back b
ement – N
w Certificate Apped from the acco
GAS
m) – User Guide
r registration
d
d(confirmation)
tion Name
ent
me
me
ddress 1
ddress 2
County
/ Postal Code
dress info
ne (inc. region cod
region code)
dress
missions
User Guide?
te Approval Perm
Purchase Authorit
button. To return to
New Certif
plication link froount. The proce
(Global Ag
e – Retail Cert
page
XXXXXX
de)
ission true
ty true
Back
o past pages click
ficate App
m the Main Meness for each certi
All uthe a
Userthe aDepPermwebSo foperm
Sele
• U
• CeAPe
ent SystemEditi
ificate Issuanc
X_
false
false
k Back within the p
plication
nu will allow eithificate was cover
sernames for thaccount ID.
rs are created asability to create
posit Purchase Aumissions are allob form. or example to crmissions:-
ect:-
ser permissions
ertifiacte pproval ermission
m) – User Guiion 1.2 –Oct
ce
page body.
her a DomainSSLred in Section 6
is account will b
s managers or as additional memuthority and cercated with the f
reate a Manager
true fals
true fals
ide – Retail tober 2007
Page 17 o
L or
be prefixed with
s staff. Managermbers of staff. Thrtificate Approvafinal section of th
r with both
se
se
of 23
s have he al he
©
2007 GlobalSign
23.
Fic Ii
Men
CertificaNew CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Bulk OrdAdd SSDeposit AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out
ValidityPeriod
1 years
1 years
DCan
n Ltd.
Certificat
For all users, clicissued or appliedcertificates can b Issued certificatein the chain to th
nu
ate Management rtificate Applicatio
ate Application Hisg Certificate Appro
Management Bulk Order posit
naged Service SSL Managed Se
der SL Managed Se
ting & Billing equest Invoices
t Management Company Details
e Users Administrator Billing Manager
istory mail
t Snapshot
t
y d
Number of
licenses 2
1
Date of ncellation
PaS
Please d
GAS (Global
te Manage
cking on the Certd for through thbe re-issued, rev
es can also be dohe GlobalSign Roo
C
on story ovals
ervice
ervice
Welstatapp
•
•
•
•
•
•
(2 A
E
Common nam
www.ABCdom.c
www.ABCdom.
ayment Status
StatuRefu
do not use your bro
Agent System
ement –Ce
tificate Applicathe Account. Thisvoked or cancelle
ownloaded in .Cot CA certificates
Certificate Ap
come to the SSL Mus of requested d
prove outstanding
Order Number na
Certificate name
Corporate ID
Common Name
Order date e.g. 07/30/2007
Issue date e.g. 07/30/2007
Among cases 1~
Edit Renewal
me Corporate
com PAR0050
.org PAR0050
us of und
owser back button
GAS
m) – User Guide
ertificate
ion History link fs menu allows thed part way thro
CER or .PKCS#7 fos)
pplication Hist
Managed Service Cdomains, make new orders.
me
2)
Order numbe
CE20070827108
CE20070827108
e ID Company name
09 ABC Inc.
09 ABC Inc.
Serial Num
01000000000114
n. To return to pas
As the numinformationand manip
Search foselect ‘Al
Clicking be altere
Clicking torder, incthe certifdetails)
Seria
(Global Ag
e – Retail Cert
Applicati
from the Main Mhe lifecycle of eaough the applica
ormat (PKCS#7 fo
tory page
Control Center. Usw applications for
~
~
r Produc
7 Organizatio(PV)
7 Organizatio(PV)
Order St
Issue com
Applicacomple
mber
4a3b186bb
st pages click Bac
mber of certificatn to a CSV (Comulate via a sprea
or orders here vial certificates’ to
allows the d (For example,
the order numbcluding the abilificate as a PKCS#
al numbers for is
ent SystemEditi
ificate Issuanc
ion Histor
Menu will presenach certificate toation process fro
ormat also includ
e the Control Cenr certificates on ap
ct CertificatType
onSSL non
onSSL non
tatus Date
pleted 08/2MT
tion eted
08/2MT
ck within the page
tes increases it isma Separated V
adsheet program
a alternative seahighlight all rec
contact details f e-mail alerts for
er displays the fty to re-issue, re
#7 file. (See the fo
ssued certificate
m) – User Guiion 1.2 –Oct
ce
ry
nt details of all ce be managed in
om within this m
des the intermedi
ter to view the vetpproved domains,
te New/transferenew
New
New
e of Order Iss
26/2007(GT+00:00)
08/GM
24/2007(GT+00:00)
body.
s possible to outValues) file and thm such as Excel.
arch criteria, or sords.
for a specific ordr expiring certific
full details of theevoke, or downlofollowing pages f
es are listed here
ide – Retail tober 2007
Page 18 o
ertificates detail. The
menu.
iate certificates
tting and
r/
sue dat
/26/200MT+00:0
put all hen to edit
imply
der to cates)
e oad for
e.
of 23
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 19 of 23
24. Certificate Application History – Edit Certificate Details
Certificate Order Details
Contact details can be modified here
for renewal notifications.
CSR details are given here
The certificate in .cer format is
given here
Certificate Details
The certificate in pkcs#7 format is
given here
The billing contact details are
given here.
The Certificate Lifecycle Management tools have the following functions
Cancel the order within a specified number of days and the refund policy will allow the funds to be added back to the account.
Certificates that need to be revoked can be revoked here. Please ensure that your internal processes and procedures are followed for revocation.
If for some reason you lose or destroy the private key for the certificate, then pressing this button initiates a process to enter a new CSR (Generated on your web server with a new private key) which can be used to re-issue the certificate. All fields (O/L/S/CN etc) will remain the same as the previously issued certificate.
This button is similar to the cancellation request above, with the exception that it initiates the purchase process and pre-populates the fields with the previous data for speed. Please note that the same refund policy period applies.
The order summary screen (seen by clicking on the order number from the previous page) and the Edit
certificate details screen, seen by clicking the button both present highly detailed summary of the information about each individual order. The important areas of this summary are highlighted in the diagram on the left:-
• Certificate Order details • The ability to amend contact details • The CSR used to process the order • The issued certificate in CER format • The issued certificate in PKCS#7 format • Details of the optional Billing Contact • Certificate Lifecycle Management tools.
©
2007 GlobalSign
25.
FAun
Men Certifica
New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Bulk OrdAdd SSDeposit AccountView/Re AccountAmend ManageChange Change E-mail hView em Account Sign out
26. To upgrade
SCA
The accounOrganizatio https://ww
Click thismenu to
n Ltd.
Certificat
For the account Approvals link frusers without ceneed secondary
nu
ate Management rtificate Applicatio
ate Application Hisg Certificate Appro
Management Bulk Order posit
naged Service SSL Managed Se
der SL Managed Se
ting & Billing equest Invoices
t Management Company Details
e Users Administrator Billing Manager
istory mail
t Snapshot
t
Upgradin
e your account t
SSL Managed ServCreate SSL ManagAdd SSL Managed
nt will then be conSSL certificate
ww.globalsign.co
s button in comb approve severa
GAS (Global
te Manage
administrator arom the Main Meertificate approvy approval. The re
Pe
on story ovals
ervice
ervice
Please do not
g to an SS
to a ManagedSS
vice ed Service Bulk Or
d Service Deposit
onverted to a Mes. The full user
om/resources/us
bination with thal orders at once
Agent System
ement –Pe
nd all users withenu will present
val permissions welevant orders to
ending for app
Order number
Appn
CExxxxx xxxx
CExxxxx xxxx
CExxxxx xxxx
CExxxxx xxxx
use your browser
SL Manag
SL account, you s
rder
Managed SSL acc guide is located
serguides/manag
e tick boxes on t.
GAS
m) – User Guide
ending Ce
h certificate apprt a list of orders pwill appear here.ogether with a s
proval
plication name
Prod
x Domai
x OrganSSL
x Domai
x OrganSSL
back button. To r
ed Service
simply need to p
count with the ad here:-
gedssl.pdf
the left hand
The altelink. Th
(Global Ag
e – Retail Cert
ertificate A
roval permissionpending approv. If all users havesummary of the
duct Certifica
Type
inSSL xxx
ization xxx
inSSL xxx
ization xxx
T
return to past page
e Account
place a deposit v
dvantage of pre
ernative cancellahis allows severa
ent SystemEditi
ificate Issuanc
Approvals
ns, clicking on thval. Please note te approval permorder are displa
ate e
New/tran-sfer/renew
New
New
New
New
To Cancellation Me
es click Back with
t)
via the SSL Mana
e vetting which s
ation menu can l orders to be de
To Ap
m) – User Guiion 1.2 –Oct
ce
s
he Pending Certithat only ordersissions then no yed.
Validity Period
Numo
licen
1 Year 1
1 Year 1
1 Year 1
1 Year 1
enu
hin the page body.
aged Service me
supports acceler
be reached by senied at the sam
proval Menu
ide – Retail tober 2007
Page 20 o
ificate raised by orders will
mber of nses
Common name
xxx
xxx
xxx
xxx
enu.
rated issuance o
electing this me time.
of 23
Certificate amount
xx
xx
xx
xx
of
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 21 of 23
27. Deposit Management - Create Bulk Order & Add Deposit Once an account has been created the Deposit Management tools can be used to ‘top up’ the account. The Create Bulk Order is best if you know the number of Certificates you wish to purchase. Important Note. Please be aware, that if you wish to add ‘additional’ domains to your account then this is the method you will need to follow as domains can only be added when additional funds are deposited. Important Note. The Rank (Discount Level) of the account will be preserved when ‘topping’ up the account, so long as the expiry date for the funds has not been exceeded. This can be viewed in the Account Snapshot section of the main menu.
Create Bulk Order.
Use the tool on this page to create a custom Bulk Order to meet your exact certificate requirements. You can add exact deposit to be spent on both DomainSSL and OrganizationSSL Certificates. For SSL Managed Service users, ensure you select OrganizationSSL as the Certificate type when creating your Bulk Order. Your discount levels are determined by the total deposit amount. To help, please view the discount table below. Your discount will automatically be calculated as you create your Bulk Order. Alternatively, if you would prefer to deposit a lump sum click Add Deposit
Rank
PAYG pricing
Bulk purchase
pricing
Discount off PAYG pricing
1 XXXX XXXX XX%
2 XXXX XXXX XX%
3 XXXX XXXX XX%
4 XXXX XXXX XX%
5 XXXX XXXX XX%
Edit Delete Product Certificate Type Order Type Validity Period
Number of
Licenses
Set Custom
start/end
Extend Renewal
Fixed Price
Discount Amount
DomainSSL Wildcard Renewal 2 years 8
XXX XXX
OrganizationSSL SubjectAltName Switch from Competitor 4 years 2 XXX XXX
XXX XXX
Rank 3
Total XXX XXX
Please do not use your browser back button. To return to past pages click Back within the page body.
Direct purchase of deposit.
• Account Balance XXX : 13,455
• Deposit amount
Use this table to determine the Rank you would like to achieve with your total purchase. PAYG (Pay As You Go) highlights the pricing you would achieve in buying single certificates. As you add certificates types you will see the Rank Summary change and additional discounts being achieved. Note at this stage you are NOT purchasing anything, this is merely a calculation tool to allow you to work out want certificates you need. If you simply want to add a fixed size of deposit, click on the Add Deposit link above.
Select the attributes of the certificates you wish to purchase such validity period, or number of Licences. And Click on Add. Once you have finished click on Purchase to follow the process of paying by credit card and adding domains. Please note that if you change the Organisation details for the account GlobalSign will need to re-validate the existing domains and the new information
Your existing Rank is highlighted here, based on the amount of credit you currently have in the account.
Enter the amount and click purchase to continue….
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 22 of 23
28. Additional information:- The final section of this guide provides some useful background information on SSL certificates. For specific troubleshooting information on particular web servers, please refer to the GlobalSign Support web site which is constantly being updated with useful tips and guidance. http://www.globalsign.com/support/index.html
29. GlobalSign Root Certificates:- As the GlobalSign (Top) Root CA is included in all mainstream browser software and operating systems:-
It is unnecessary to install the Root certificate on to your web server or web hosting control panel, however good security practice dictates that GlobalSign provides an intermediate certificate from which it signs end entity certificates. The intermediate certificate will be delivered along with the end entity certificate, so it is vital that both certificates are installed onto the web server. Again more specific details can be found on:- http://www.globalsign.com/support/index.html
Why is it necessary to install the intermediate? This is the basic principle of PKI (Public Key Infrastructure). By having a cryptographically secured certificate chain back to a trusted Root certificate, users can rely that the certificate they are viewing actually does belong to the entity which provided it. Examples of certificates which are not trusted because they do not chain up to a trusted root are highlighted on the following pages.
GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007
GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 23 of 23
Microsoft’s IE7 (Available on Windows XP Service pack 2 systems and on Windows Vista® ) rather than presenting a small warning to users, which previously was sometimes ignored, now clears the entire web page and presents a very visible message with clear instructions not to proceed, so it is vital that you correctly install your GlobalSign SSL certificate and the associated intermediate certificates.
Users who choose to ignore the warning are presented with an address bar where the background turns red and the Security Status window indicates a certificate error, which is very damaging to the perception of your product or service in the eyes of a customer.