GAS User Guide - Retail 1.2 - GlobalSign

GAS (Global Agent System) – User Guide – Retail Certificate Issuance © 2007 GlobalSign Ltd. Page 1 of 23

US Office - Two International Drive | Suite 330 | Portsmouth | NH 03801 UK Office – 6 Kings Row | Armstrong Road | Maidstone | Kent | ME15 6AQ

EU Office – UbiCenter | Philipssite 5 | 3001 Leuven | Belgium Japan Office 20-1 Sakura-gaoka-cho | Shibuya-ku | Tokyo 150-0031

GAS (Global Agent System) Retail Certificate Issuance Edition 1.2

GlobalSign created the GAS (Global Agent System) as a highly flexible, multi-tiered, multi user certificate lifecycle management tool to maximize the benefits in choosing GlobalSign as the provider of your digital identities. This user guide addresses the specific needs of the Retail account user as well as a basic understanding of digital certificates. If you require advice or information concerning SSL Managed Service accounts or Partner/Reseller accounts, please contact your GlobalSign Account Manager or e-mail [email protected]. A very basic architecture of the GAS system is illustrated below, highlighting the three alternative account types.

GAS (Global Agent System)

The latest versions of the user guides are located here:- https://www.globalsign.com/resources/userguides/reseller.pdf https://www.globalsign.com/resources/userguides/sslmanagedservice.pdf https://www.globalsign.com/resources/userguides/retail.pdf

o v e r 1 0 y e a r s o f s e c u r i n g identities, web sites & transactions

For more enhanced details on anything in this user guide please refer to: www.globalsign.com

[email protected] US: 866 511 5035

UK: +44 1622 766766 EU: +32 16 89 19 00 JP: +81 03 5728 1551

GAS (Global Agent System) – User Guide – Retail Edition 1.2 –October 2007


1. Useful numbers and answers to FAQ’s Technical Support

All technical questions regarding your certificates should be forwarded to our Support Department, but please first have a look at our FAQ's. (http://www.globalsign.com/support/techfaq.html ) It is very likely that this will allow you to find an answer to your question and this also allows us to solve your issue most efficiently.

Email: [email protected] Support Web Site

Vetting Department

Fax your vetting documents to your regional office

Tel US: 866 511 5035 Email: [email protected]

Fax vetting documents to: Fax US: 617 830 0779

Vetting Department

Fax your vetting documents to your regional office

Tel EU English speaking: +44 1622 766766 Tel EU Non-English speaking: +32 16 891900 Email: [email protected]

Fax vetting documents to: Fax EU: +32 16 79 52 30

2. Contents Section Page 1. Useful numbers and answers to FAQ’s ................................................................................................................................................. 2 2. Contents ................................................................................................................................................................................................ 2 3. General Principles:- Why should I use my Retail Account?:- ........................................................................................................... 3 4. General Principles:- How to use this User Guide:- ................................................................................................................................. 3 5. General Principles:- The Retail Account Screen Layout and callout styles:- ......................................................................................... 3 6. General Principles:- The Retail Purchase Process Process:- .................................................................................................................. 4 7. DomainSSL:- The Purchase Process – Certificate Selection ............................................................................................................ 5 8. DomainSSL:- The Purchase Process – Account Setup .......................................................................................................................... 6 9. DomainSSL:- The Purchase Process – CSR Entry ................................................................................................................................... 7 10. DomainSSL:- The Purchase Process – Approver Email page ............................................................................................................... 8 11. DomainSSL:- The Purchase Process – Application end user information ............................................................................................ 8 12. DomainSSL:- The Purchase Process – SAN Support .............................................................................................................................. 9 13. DomainSSL:- The Purchase Process – The Approver e-mail. ................................................................................................................ 9 14. OrganizationSSL:- The Purchase Process – Certificate Selection ................................................................................................. 10 15. OrganizationSSL:- The Purchase Process – Account Setup ................................................................................................................ 11 16. OrganizationSSL:- The Purchase Process – CSR Entry ......................................................................................................................... 12 17. OrganizationSSL:- The Purchase Process – Application end user information .................................................................................. 13 18. DomainSSL:- The Purchase Process – SAN Support ............................................................................................................................ 13 19. OrganizationSSL:- The Purchase Process – Seal profile information entry ........................................................................................ 14 20. Retail Account Configuration :- The Account Administrator Menu:- ........................................................................................... 15 21. General Principles:- Delegated Administration:- ................................................................................................................................ 16 22. Certificate Management – New Certificate Application ..................................................................................................................... 17 23. Certificate Management –Certificate Application History .................................................................................................................. 18 24. Certificate Application History – Edit Certificate Details .................................................................................................................... 19 25. Certificate Management –Pending Certificate Approvals .................................................................................................................. 20 26. Upgrading to an SSL Managed Service Account ............................................................................................................................ 20 27. Deposit Management - Create Bulk Order & Add Deposit ................................................................................................................. 21 28. Additional information:- ...................................................................................................................................................................... 22 29. GlobalSign Root Certificates:- ............................................................................................................................................................. 22

©

2007 GlobalSign

3. Gen This guide you will be

Compland rev

A bendiscouGlobal

No infrmanag

Advan

Approvalerts s

Full bilauthor

Compr

XML baAccount ad

A beneDomai

4. Gen This user gthe followi

Role Symb

5. Gen

n Ltd.

neral Prin

highlights how e provided an Ac

lete Certificate livocation across

efit of an Accounts - no service fSign competito

rastructure or pege certificates

nced Delegated

val based modesent to Approve

ling managemerization

rehensive report

ased API to allowdministrators a

efit of Pre-vettinin). Organization

neral Prin

guide has been sng symbols are

bol

Account owner thato amendStaff in Ch

Manager the Accouthe accoufurther sucertificate

Staff – Weither thelevels Stafaccount, additiona

Billing Ccreated tobilling info

neral Prin

GAS (Global

ciples:- W

to use the Globaccount which off

ifecycle manage many departme

nt is that purchafees and the abir

ersonnel overhe

Administration -

el - Administrators)

ent - view and do

ting and auditin

w full integrationalso have the po

g of domains allnSSL certificates

ciples:- H

structured to foused to illustrat

Descriptio

Administrator at can see all m

d or create a hieharge

– With adminisunt Administratount, a Manager ub level and de approval and d

With administrae Account Adminff members hava Staff memb

l account users.

ontact – A seo receive confirormation.

ciples:- Th

Menu

InforWind

Agent System

Why should

al Agent Systemfers the followin

ement – With a reents.

asing all certificaility to save cons

ad - GlobalSign

- administrator c

r and users with

ownload invoice

g functions - rep

n with enterpriseossibility to upg

lows for instant s can then be pro

How to use

llow the procese the menus and

on of Role

– The top levelenus and has th

erarchy of Mana

tration rights deor and a unique is also able to

delegate tasks ideposit authoriza

ation rights denistrator or the

ve a unique log-ber cannot cre

eparate contactmation informa

he Retail

u Items

mation dow

GAS

m) – User Guide

d I use my

m to purchase a cg benefits:-

etail account yo

ates through a cosiderable budge

runs the WebTr

creates users ba

Approver privil

es and automatic

port on spend, c

e purchasing sysgrade to an SSL

issuance to any ovisioned instan

e this User

s of applying fod permissions:-

PeS

account he ability

agers and

efined by log-in to create a including ation

fined by manager -in to the eate any

Papp

t can be ation and

Account S

Throughointerest. F Important

(Global Ag

e – Retail Cert

y Retail Ac

certificate throug

u can control th

ommon interfacet compared to b

ust certified cert

sed on roles and

eges decide wh

cally create new

certificates, upco

stems L Managed Serv

domain or sub-dntly. (To upgrad

r Guide:-

or a retail certific

rmission Symbol

CeAdpeMa

DeAdpeMa

Sy

Please note that proval permissio

Screen Lay

out this guide caFor example:-

t points are high

ent SystemEditi

ificate Issuanc

ccount?:-

gh the retail web

e application, is

ce provides the pbuying certificat

tificate factory, e

d assigns approp

ether applicatio

w downloadable

oming renewals,

vice account wh

domain under thde the account, p

cate. In order t

Description

ertificate Approdministrator

rmissions, howeanagers and/or S

eposit Authorizdministrator h

rmissions, howeanagers and/or S

ystem Default A

Only the Accou

ons to approve pto deposit addi

yout and

allouts are used

hlighted with Red

Example

Important P

m) – User Guiion 1.2 –Oct

ce

b site. As part o

suance, re-issua

possibility of enhes separately or

enterprises just l

priate privileges

ons should be iss

"quotes" for inte

etc

hich provides th

he main TLD (Toplease see Sectio

o better unders

n of Approval/Pe

oval – By defauhas certifica

ever these can Staff

zation – By defahas Deposit ever these can Staff

Approval level:-

unt Administratpending certificational funds.

callout st

d to highlight s

d callouts. Point Example

ide – Retail tober 2007

Page 3 of

of the process

ance, renewal

hanced from a

log in and

sued (email

ernal

he following:-

op Level on 26)

tand the guide

ermission

ult the Accounate approvabe delegated to

ault the AccounAuthorization

be delegated to

tor has default ate requests and

tyles:-

pecific points o

f 23

t al o

t n o

d

of



6. General Principles:- The Retail Purchase Process:- The purchase process for a certificate is highlighted in the diagram below. Either a DomainSSL or an OrganizationSSL certificate can be purchased through the retail web site. The majority of the processes are similar with the exception of the vetting and authentication stages (Step 5 below). Please note that a DomainSSL certificate can be purchased and issued in several minutes, where as an OrganizationSSL certificate can take 2-3 working days.

Sign Up Follow on

orders Detailed Description Page Reference in this manual

1 1 1 1

A CSR (Certificate Signing request) is required from either your hosting provider if you have a managed service, or it can be

created from your web hosting control panel. For more details on creating CSR’s please review:-

https://www.globalsign.com/support/index.html

(web link to external resource)

2 2

The process is initiated from

inside the account

2 2

Please select the appropriate purchase link from the web site and select the appropriate features, such as duration, number of licenses and support for SAN (Subject Alternative Name). At

this point either DomainSSL or OrganizationSSL may be chosen

Section 7 on Page 5 for DomainSSL and Section 14 on Page 10 for OrganizationSSL

3 3 Account

creation skipped Provide the details for the Account Administrator, selecting

username and password etc.


4 4 4 4

Paste the CSR and if appropriate customize the ‘valid from’ and ‘valid to’ dates. You will also be asked for payment

information.


5 5

For DomainSSL certificates a challenge response e-mail will be sent. Once the e-mail has been received the e-mail will direct you to a web page where domain ownership can be verified.

Section 10 on Page 8

6 6

A DomainSSL certificate will be issued once the challenge response has been completed and payment has been

collected.. Section 13 on Page 9

5

If the organization is the same this

may be skipped

It may be possible for GlobalSign to authenticate the organization information in the CSR from a DUNS number

provided. If not, GlobalSign may require additional proof of incorporation.

Section 17 on Page 13

6 6

An OrganizationSSL certificate together with a site seal will be issued once the challenge response has been completed and

payment has been collected.. Section 19 on Page 14



7. DomainSSL:- The Purchase Process – Certificate Selection A DomainSSL certificate offers a simple, quick and easy way to secure a FQDN (Fully Qualified Domain Name). The process to purchase a DomainSSL is highlighted opposite. Please note that you will need a CSR to complete Step 1 (Certificate Signing Request). For more information on how to generate a CSR, please review the GlobalSign support web site for details. https://www.globalsign.com/support/index.html

Certificate Selection

• Product DomainSSL

• SSL Certifiacte Type Please select the type of SSL Certificate

Standard SSL issued to a single Fully Qualified Domain Name only

Wildcard SSL issued to "*.domain.com"

Standard SSL with SANs (Subject Alternative Names) issued to a single Fully Qualified Domain Name and up to three internal server names e.g. "server1"

• Number of Licences Our current promotion gives you 3 licenses per license block below,

e.g. selecting "1" gives you 3 licenses, "2" gives you 6 licenses

• Certificate Validity Period & Customization of Start & End Date Check if you require the certificate to be valid from a specific date.

Leave blank and the certificate will be valid upon completion of vetting. Year Price

Six months XXX

1 year XXX

2 years XXX

3 years XXX

4 years XXX

5 years XXX

Customization period XXX

• Is this order New or transfer

Renewal

Switching from a competitor

• Campaign Code If you have a campaign code, please enter here

• Coupon Code If you have a coupon code, please enter here

• Option • Amount tax included

XXX

Please do not use your browser back button. To return to past pages click Back within the page body.

Completing this form moves you on to the Account set-up process where the account administrator is set up. Full details of the DomainSSL product are located here:- http://www.globalsign.com/digital_certificate/domain/index.htm

Setting the Customization Period will allow you to

modify the issue date and expiry date of your SSL

certificate. The rules for this are highlighted later on.

Standard SSL Please note you will need one IP per SSL certificate

Server Example domains that can be hosted Notes

Single Server,

Single IP

www.domain.com www.domain.co.uk www.domain.net

(Assume shared IP)

If a single IP address is allocated to this server, then only a single SSL

certificate can be installed to secure ONE

domain.

Single Server,

Single IP

www.domain.com

secureserver payroll

server1234

If a single IP address is allocated to this server,

then internal server names can be

supported with the SAN option.

Single Server, Multiple IPs


If multiple IP addresses

are allocated to this server, then a single SSL certificate per IP can be

installed.

Wildcard SSL

Server Example domains that can be hosted

Notes

Single Server,

Si l IP

www.domain.com

secure.domain.com news.domain.com


then all sub-domains can be secured with SSL

©

2007 GlobalSign

8. Dom The Accoucontact ma

A

SumPleabelo

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

CerPlea

•

•

•

•

•

•

•

•

etc

n Ltd.

mainSSL:-

nt is set-up by eay be included.

Account Setu

mmary - Organizase verify your organow, you will experienc

Organization Na

Business type

VAT Number

Street Address 1

Street Address 2

City

State or County

Zip Code / Posta

Country

Other address in

Time zone

Telephone (inc.

Fax (inc region c

DUNS (if availab

How did you heGlobalSign?

rtificate Applicatase detail the person /

User ID

Password

Confirm Passwo

Department

First Name

Last name

Job Title

Email Address

c

Plea

GAS (Global

- The Purc

ntering details aAll items in RED

p

zation Details ization details. By ence the best service fro

ame

1

2

y

al Code

nfo

region code)

code)

ble

ear about

tion Details / company making th

ord

ase do not use you

Agent System

chase Proc

about the organ are mandatory.

suring the accuracy oom your Global Agent

e.g. GlobalSign I

he application.

Click if your TechOrganization De

*Please check yo

ur browser back b

GAS

m) – User Guide

cess – Acc

ization, followed. Please enter th

of the information yot System (GAS) SSL M

nc

hnical Contact detetails.

our email address h

button. To return to

(Global Ag

e – Retail Cert

count Setu

d by details of thhe information c

ou have provided to anaged Service accou

ails as the same as

has been entered c

o past pages click

Pressinfor

servi

ent SystemEditi

ificate Issuanc

up

he account admarefully and acc

us in the summary unt.

s your

correctly

k Back within the p

This is w

The can be clfrom the

If no VAT nuin your

Although thensure this i

Ac

sing prrmation entered

ce. You must se


ce

inistrator. A opturately.

page body.

where you create

For the Please

to proensure

icked to copy th section above

umber is enteredcountry, you wi

his can be enteres correct during

An optional billican be added by

check box of Application Deand entering ne

resents a summa, and also the GA

elect to


Page 6 of

tional billing

e the Account d

Account admin use a strong pasotect the accoune the e-mail add

correct.

buhe organisation d

d and VAT is appll be charged VAed later it is advi

g the initial appli

ng contact leaving the ‘same as tails’ clear ew details

ary of the AS terms of

o continue.

f 23

details:-

istrator. ssword

nt and dress is

utton details

plicable AT. ised to cation.



9. DomainSSL:- The Purchase Process – CSR Entry A CSR (certificate Signing Request) is one of the most important requirements in the SSL purchase process. The CSR forms the basis of the certificate that GlobalSign will eventually send back to you once the process is complete. Please ensure the CSR you submit in this section is created using the web server you intend to use the SSL certificate on so that the public and private keys match when you install the final certificate. The GAS system will parse the CSR and show you the information on the next confirmation screen

DomainSSL application CSR entry

• Contract Period 3 years

• Customization Period

• Certificate Signing

Request ( CSR ) Generating a CSR and paste into the form. Make sure that your CSR contains the complete header and footer "BEGIN" and "END" lines. For assistance on generating your CSR, please click here

-----BEGIN CERTIFICATE REQUEST----- MIIB8jCCAVsCAQAwgbExCzAJBgNVBAYTAkdCMRMw EQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlT b21lIENpdHkxIDAeBgNVBAoTF0FuIGV4YW1wbGUg T3JnYW5pc2F0aW9uMRUwEwYDVQQLEwxBIGRlcGFy dG1lbnQxFzAVBgNVBAMTDnd3dy5kb21haW4uY29t MScwJQYJKoZIhvcNAQkBFhhleGFtcGxlLWVtYWls QGRvbWFpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMStAPbTlAbejGojLQ9YnMz5951C iMt04kh+gS5DzPqcLBsXuvGIx5lYV/QY9be07w3/ FNSwQ+naT/9abKq+0WJxz7oTXJYGXjGEpbf9JYZm lHRUnBUB783DfAJIIv6frA8Edmqh4rTgKavg9UF8 t7IItqqXE+Gxwgih5xb5dgYZAgMBAAGgADANBgkq hkiG9w0BAQUFAAOBgQBzbkT07Vo50WaKDrjFsxQH RWsZnXBLZSLQjc0K/PJCXeZ3eta4teNHOYy0XiVU g6I7/gaSSIg1yqRkZUslVngYDKOQ9nw9HZ0g3LQg CdvuhkXgwggawvBgnKrcl2oH84FQHZN/otaBm1sI CGmw5EEF2s31mmcs+ouX2ECGvNdWKA== -----END CERTIFICATE REQUEST-----


Certificate customization is a powerful tool to ensure that new certificates ordered from the account can be customized to start or finish on a particular date. This allows for certificates to be synchronized with billing cycles and/or the expiry dates of other certificates already being used. Every certificate type has a Valid from and a Valid to date. The refund policy of the certificate will determine how close to the application date the Valid from date can be set. For example 3 days for a DomainSSL. Please note that the GAS system will automatically allow for a Leap year and provide a 366 day certificate if necessary.

If Customization Period was selected on the previous page, then the issue date

and expiry date of the certificate can be customized. (Please see the rules below)

Please remember that country codes are 2 digit codes. For example

United States = US, France = FR and United Kingdom = GB (Not UK)



10. DomainSSL:- The Purchase Process – Approver Email page The challenge response e-mail will be sent to the contact you select from this page. Only approved domain administrator e-mails can be used. GlobalSign will interrogate the whois record to ensure the correct e-mails are made available. You must be able to reply to this e-mail address for the challenge response to succeed. Alternative methods of validation are possible if none of the e-mails are suitable. – Please contact GlobalSign.

Approver Email page

In order to proceed with your SSL certificate application you must select an appropriate Approver

Email address. We will send an Approval Email to the address you select. The email address selected must be capable of receiving the Approval Email. To make sure you receive the Approver Email quickly and trouble free: - Make sure you check spam filters in case the Approver Email is marked as spam - Make sure you select a live address that is capable of receiving email

[email protected]

[email protected]

[email protected]

[email protected]

etc


11. DomainSSL:- The Purchase Process – Application end user information

DomainSSL application end user information entry

• Retrieve previous order details set from your registed user info

Contact Information

• First Name

• Last Name

• Telephone (inc. region code)

• Email Address

• Organisation name

• Department

• Set Point of Contact Check here to set this user as the point of contact

• Set E-mail Address Check here to set this email address as the recipient of all GlobalSign automated emails

Other Information and Special Instructions if you have any additional instructions please state them here

• Special Instructions

Select Payment Method

• Payment Details Credit card


GlobalSign will verify the domain exists and present a set of standard administrator e-mail addresses, GlobalSign will also look at the Who-is record for the domain and present these as alternative options. Please ensure you will be able to respond to a challenge response e-mail for this domain.

Important – Check this box if you wish to be the point of contact for e-mail alerts that the SSL certificate is due to expire; otherwise the Account Administrator will receive the alerts. (30 days before, 7 days before and 1 day before)

Important – The initial purchase must be made by credit card. Once the account is set up other options will be made available.



12. DomainSSL:- The Purchase Process – SAN Support Without SAN (Subject Alternative Name) support, an SSL certificate would only support a single IP address or FQDN (Fully Qualified Domain Name), however more recent browsers are able to use the SAN functionality to allow multiple servers to be secured. GlobalSign offers the ability for 3 alternative internal servers to be included.




• SubAltName1

• SubAltName2

• SubAltName3


13. DomainSSL:- The Purchase Process – The Approver e-mail. A DomainSSL certificate offers a simple, quick and easy way to secure a FQDN (Fully Qualified Domain Name). The process involves replying to a ‘challenge response’ e-mail to verify ownership of a domain. An approver e-mail will be sent to the e-mail address chosen in section 10. When the e-mail is received the recipient should verify all information in the e-mail especially the domain. Clicking on the link in the mail will direct you to a web page where an ‘I APPROVE’ or ‘I DO NOT APPROVE’ selection can be made. Selecting I APPROVE will provide a confirmation screen and e-mail the completed SSL certificate to the e-mail address of the applicant.

If SAN support was selected during the initial certificate

selection, you have the opportunity to add up to three alternative internal

server names here.

Examples of Internal Server names are:-

• 192.168.2.1 • Server1



14. OrganizationSSL:- The Purchase Process – Certificate Selection An OrganizationSSL certificate contains information on who owns the domain and web server hosting the SSL session. During the process there is a possibility that you will be required to submit business documentation. OrganizationSSL certfiiactes can take 2-3 business days to issue due to the extended vetting process. Please note that you will need a CSR during the application process (Certificate Signing Request). For more information on how to generate a CSR, please review the GlobalSign support web site for details. https://www.globalsign.com/support/index.html

Certificate Selection

• Product OrganizationSSL

• SSL Certifiacte Type Please select the type of SSL Certificate

Standard SSL issued to a single Fully Qualified Domain Name only

Wildcard SSL issued to "*.domain.com"

Standard SSL with SANs (Subject Alternative Names) issued to a single Fully Qualified Domain Name and up to three internal server names e.g. "server1"

Public IP address SSL Issued to a publically accessible IP address

• Number of Licences Our current promotion gives you 3 licenses per license block below,

e.g. selecting "1" gives you 3 licenses, "2" gives you 6 licenses

• Certificate Validity Period & Customization of Start & End Date Check if you require the certificate to be valid from a specific date.

Leave blank and the certificate will be valid upon completion of vetting. Year Price

Six months XXX

1 year XXX

2 years XXX

3 years XXX

4 years XXX

5 years XXX

Customization period XXX

• Is this order New or transfer

Renewal

Switching from a competitor

• Campaign Code If you have a campaign code, please enter here

• Coupon Code If you have a coupon code, please enter here

• Option • Amount tax included

XXX


Completing this form moves you on to the Account set-up process where the account administrator is set up. Full details of the OrganizationSSL product are located here:- http://www.globalsign.com/digital_certificate/serversign/index.htm

Pressing CONTINUE moves to the Account set-up process.

Setting the Customization Period will allow you to

modify the issue date and expiry date of your SSL

certificate. The rules for this are highlighted on the

following page.

Standard SSL Please note you will need one IP per SSL certificate


Notes

Single Server,

Single IP


(Assume shared IP)

If a single IP address is allocated to this server, then only a single SSL

certificate can be installed to secure ONE

domain.

Single Server,

Single IP

www.domain.com

secureserver payroll

server1234


then internal server names can be

supported with the SAN option.

Single Server, Multiple IPs


If multiple IP addresses

are allocated to this server, then a single SSL certificate per IP can be

installed.

Wildcard SSL

Server Example domains that can be hosted Notes

Single Server,

Single IP

www.domain.com

secure.domain.com news.domain.com


then all sub-domains can be secured with SSL

Public IP address SSL (Not available under DomainSSL)


Notes

Single Server,

Single IP

211.0.153.53

212.113.70.26

Again as with the

standard SSL, if a single IP address is allocated to

this server, then only a single SSL certificate can

be installed to secure ONE Public IP

It is possible to validate the ownership of a public IP address with an OrganizationSSL certificate. This will be done through verification of a web page change. The GlobalSign vetting team will provide instructions

©

2007 GlobalSign

15. The Accoucontact ma

A

SumPleabelo

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

CerPlea

•

•

•

•

•

•

•

•

etc

n Ltd.

Organiza

nt is set-up by eay be included.

Account Setu

mmary - Organizase verify your organow, you will experienc

Organization Na

Business type

VAT Number

Street Address 1

Street Address 2

City

State or County

Zip Code / Posta

Country

Other address in

Time zone

Telephone (inc.

Fax (inc region c

DUNS (if availab

How did you heGlobalSign?

rtificate Applicatase detail the person /

User ID

Password

Confirm Passwo

Department

First Name

Last name

Job Title

Email Address

c

Plea

GAS (Global

tionSSL:-

ntering details aAll items in RED

p

zation Details ization details. By ence the best service fro

ame

1

2

y

al Code

nfo

region code)

code)

ble

ear about

tion Details / company making th

ord

ase do not use you

Agent System

The Purch

about the organ are mandatory.

suring the accuracy oom your Global Agent

e.g. GlobalSign I

he application.

Click if your TechOrganization De

*Please check yo

ur browser back b

GAS

m) – User Guide

hase Proc

ization, followed. Please enter th

of the information yot System (GAS) SSL M

nc

hnical Contact detetails.

our email address h


(Global Ag

e – Retail Cert

cess – Acco

d by details of thhe information c

ou have provided to anaged Service accou

ails as the same as

has been entered c

o past pages click

Pressinfor

servi

ent SystemEditi

ificate Issuanc

ount Setu

he account admarefully and acc

us in the summary unt.

s your

correctly

k Back within the p

The can be clicfrom the se

If no VAT nuin your

Although thensure this i

Ac

sing prrmation entered

ce. You must se

Importanplease en

organizaticertificate


ce

p

inistrator. A opturately.

page body.

These Acco

Plepasswo

mail

cked to copy theection above

umber is enteredcountry, you wi

his can be enteres correct during

An optional billican be added by

check box of Application Deand entering ne

resents a summa, and also the GA

elect to

nt Tip: If you hanter it here. Doinional vetting pro

e to be issued in


Page 11 o

tional billing

are the details oount administratease use a stronord and ensure tl address is corre

but organisation de

d and VAT is appll be charged VAed later it is advi

g the initial appli

ng contact leaving the ‘same as tails’ clear ew details

ary of the AS terms of

o continue.

ve a DUNS numng so will speedocess and allow a shorter timefra

of 23

of the tor. g the e-ect.

tton etails

plicable AT. ised to cation.

ber, the your ame.



16. OrganizationSSL:- The Purchase Process – CSR Entry A CSR (certificate Signing Request) is one of the most important requirements in the SSL purchase process. The CSR forms the basis of the certificate that GlobalSign will eventually send back to you once the process is complete. Please ensure the CSR you submit in this section is created using the web server you intend to use the SSL certificate on so that the public and private keys match when you install the final certificate. The GAS system will parse the CSR and show you the information on the next confirmation screen

OrganizationSSL application CSR entry

• Contract Period 3 years

• Customization Period

• Certificate Signing

Request ( CSR ) Generating a CSR and paste into the form. Make sure that your CSR contains the complete header and footer "BEGIN" and "END" lines. For assistance on generating your CSR, please click here

-----BEGIN CERTIFICATE REQUEST----- MIIB8jCCAVsCAQAwgbExCzAJBgNVBAYTAkdCMRMw EQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlT b21lIENpdHkxIDAeBgNVBAoTF0FuIGV4YW1wbGUg T3JnYW5pc2F0aW9uMRUwEwYDVQQLEwxBIGRlcGFy dG1lbnQxFzAVBgNVBAMTDnd3dy5kb21haW4uY29t MScwJQYJKoZIhvcNAQkBFhhleGFtcGxlLWVtYWls QGRvbWFpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMStAPbTlAbejGojLQ9YnMz5951C iMt04kh+gS5DzPqcLBsXuvGIx5lYV/QY9be07w3/ FNSwQ+naT/9abKq+0WJxz7oTXJYGXjGEpbf9JYZm lHRUnBUB783DfAJIIv6frA8Edmqh4rTgKavg9UF8 t7IItqqXE+Gxwgih5xb5dgYZAgMBAAGgADANBgkq hkiG9w0BAQUFAAOBgQBzbkT07Vo50WaKDrjFsxQH RWsZnXBLZSLQjc0K/PJCXeZ3eta4teNHOYy0XiVU g6I7/gaSSIg1yqRkZUslVngYDKOQ9nw9HZ0g3LQg CdvuhkXgwggawvBgnKrcl2oH84FQHZN/otaBm1sI CGmw5EEF2s31mmcs+ouX2ECGvNdWKA== -----END CERTIFICATE REQUEST-----


Certificate customization is a powerful tool to ensure that new certificates ordered from the account can be customized to start or finish on a particular date. This allows for certificates to be synchronized with billing cycles and/or the expiry dates of other certificates already being used. Every certificate type has a Valid from and a Valid to date. The refund policy of the certificate will determine how close to the application date the Valid from date can be set. For example 7 days for an OrganizationSSL. Please note that the GAS system will automatically allow for a Leap year and provide a 366 day certificate if necessary.

If Customization Period was selected on the previous page, then the issue date

and expiry date of the certificate can be customized. (Please see the rules below)

Please remember that country codes are 2 digit codes. For example

United States = US, France = FR and United Kingdom = GB (Not UK)



17. OrganizationSSL:- The Purchase Process – Application end user information

OrganizationSSL application end user information entry

• Retrieve previous order details set from your registered user info

Contact Information

• First Name

• Last Name

• Telephone (inc. region code)

• Email Address

• Organisation name

• Department








18. OrganizationSSL:- The Purchase Process – SAN Support Without SAN (Subject Alternative Name) support, an SSL certificate would only support a single IP address or FQDN (Fully Qualified Domain Name), however more recent browsers are able to use the SAN functionality to allow multiple servers to be secured. GlobalSign offers the ability for 3 alternative internal servers to be included.




• SubAltName1

• SubAltName2

• SubAltName3


Important – Check this box if you wish to be the point of contact for e-mail alerts that the SSL certificate is due to expire; otherwise the Account Administrator will receive the alerts. (30 days before, 7 days before and 1 day before)

Important – The initial purchase must be made by credit card. Once the account is set up other options will be made available.

If SAN support was selected during the initial certificate

selection, you have the opportunity to add up to three alternative internal

server names here.

Examples of Internal Server names are:-

• 192.168.2.1 • Server1



19. OrganizationSSL:- The Purchase Process – Seal profile information entry

An OrganizationSSL certificate features the option to display a clickable Site Seal. The primary function of a site seal is to show visitors you are a secure site. The GlobalSign Site seal is

a sign of trust on the Internet. It shows your customers you have been authenticated and you use the strongest SSL possible to secure your transactions. Displaying the GlobalSign Site Seal will help visitors trust your web site, and then help convert general visitors to paying customers. For more information on displaying the site seal, please review the information on this page :- http://www.globalsign.com/support/ssl-site-seal.html The data which appears on your site seal is input during the next section of the application process.

OrganizationSSL application seal profile information entry

• Retrieve previous order

details set from your Corporate info

Seal Information The below details will be shown in your Web Site Profile presented to your web site visitors click on the Secured by GlobalSign Secure Site Seal. Some information on this page cannot be edited – this information is taken from your Certificate Signing Request (CSR). To maximize trust in your site, please ensure this information is as complete and accurate as possible.

• Organization Name XXXXXXXXXXXXXXX

• Street Address 1 * If you have provided the

information in the 'City' entry ( This is extracted from the CSR )

you do not need to fill this.

e.g. 6 Kings Row

• Street Address 2 * If you have provided the

information in the 'City' entry ( This is extracted from the CSR )

you do not need to fill this.

e.g. Armstrong Road

• City XXXX

• State or County XXXX

• Post/Zip code / Postal Code

e.g. Marketing

• Country XX

• Other address info

• Telephone(inc, region code)

e.g. +44 ( 0) 1622 766766

• Fax(inc, region code)

e.g. +44 ( 0) 1622 662255

Authentication information

• DUNS (if available)



Certain information within this screen will be fixed. (indicated as XXXX in the diagram below. This information will be validated by GlobalSign during the vetting process.

Once the credit card information has been entered and the terms and conditions have been accepted, GlobalSign will send a confirmation e-mail to the account administrator. The final confirmation screen will show a username for the account and a confirmation of the order number for the certificate. The status of the order can be monitored in the ‘Certificate Application History’ menu item. To view this menu you will need to log in to the account. The Account functions and menu items are discussed in more detail on the following pages.

Important Tip: If you have a DUNS number, please enter it here. Doing so will speed the organizational

vetting process and allow your certificate to be issued in a shorter timeframe.

©

2007 GlobalSign

20. R

WAd

The login p

Men

CertificaNew CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Order Add SSL AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out

The Ma

Theme

The Sta

Thethe

The remaincertificatesGlobalSign

n Ltd.

Retail Acc

When you first lAccount Adminisdisabled. For exa

page for all users

nu

ate Management rtificate Applicatio

ate Application Hisg Certificate Appro

Management Bulk Order posit

naged Service SSL Managed S

L Managed Service

ting & Billing equest Invoices

t Management Company Details

e Users Administrator Billing Manager

istory mail

t Snapshot

t

Plea

anager Me

e menu for manenu items shown

aff in Cha

e menu for Staffe menu items sh

ning pages of ths and also to addn’s need to conti

GAS (Global

count Con

og in to the systrator will incluample ‘Manager

s is https://syste

on story ovals

Service Bulk

e Deposit

ase do not use you

enu:

agers will vary dn above.

rge Menu

f members will vown above.

is user guide disd additional fundnually improve t

Ts

Agent System

nfiguratio

ystem you will bude all the areas rs’ and ‘Members

m.globalsign.co

Welcome tomanaging al Please use applicationsdetails up to Keep checkResources ana GlobalSign

ur browser back b

depending upon

:

vary depending u

scuss each menuds to the accounthe GAS system

These last three mnapshot of the a

GAS

m) – User Guide

on :- The A

be presented w highlighted bes of Staff’ canno

om/loginpartner

the GlobalSign pall your Certificate a

the links on the s and manage exo date.

ing back to the nd Sales Guides ann partner.


n the permission

upon the permis

u item and highlnt. Please note t based on custo

These certificother u

The Acwithin contac

menu items allowaccount (Funds a

The Acaccoun

The Acand ma

These the accBulk Oif total

IMPORaccoun

(Global Ag

e – Retail Cert

Account Ad

with the main Alow. For delegat Amend Compa

_en/loginpartne

artner Global Ageand account requir

left to make addisting application

GAS as we'll shond of course Gener

o past pages click

ns set by the Acc

ssions set by the

light what actionhat there may smmer feedback an

menu items allocate types. Theusers in the acco

ccount Administ the account (i.e

ct can also be ch

w you to view thand critical expi

ccounting & Billinnt activity.

ccount Administanage the perm

menu items allocount either for

Order wizard, or future certificat

RTANT - Add funnt will be change

ent SystemEditi

ificate Issuanc

dministra

Administration Mated administratany Details.

er.do

nt System (GAS). Grements.

d credit to your as, download invo

rtly be adding Nral Hints and Tips t

k Back within the p

ount Administra

e Account Admin

ns need to be tamall changes in nd our own ong

ow the Account A approval capab

ount. (See the Ma

trator can relinque. either Manage

anged here.

he E-mail historyry dates) and the

ng function pres

trator can correcissions of other

ow the Account Aa specific numb

r to simply add ate requirements

nds via this mened to a Manage


ce

ator Menu

Menu, which bytors some of the

GAS is your dashb

account, make neoices, and keep y

ews, Offers, Partnto making the mos

page body.

ator. It will be a

nistrator. It will

ken to order/ap functionality. T

going improvem

Administrator tobilities can also banaging Users)

uish the role to ar or Staff). The o

y in the account,e sign out of the

sents a summary

ct or amend com users on the acc

Administrator tober of certificatesa Deposit amoun are unknown).

u item instead aedSSL account.


Page 15 o

:-

y default for an e menus will be

oard portal to

ew Certificate your company

ner Marketing st out of being

subset of the

be a subset of

prove/cancel his is due to ent plans.

o apply for new be delegated to

another user optional Billing

, view a e system.

y of the

mpany details count.

o add credit to s using the nt (for example,

and the

of 23

©

2007 GlobalSign

21. It is importcreate a defuture it aarchitectur

Men Certifica

New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate SBulk OrdAdd SSDeposit AccountView/Re AccountAmend ManageChange Change E-mail hView em Account Sign out

n Ltd.

General P

tant to determinelegated adminlways pays to

res that GAS is ca

nu




naged Service SSL Managed Servder SL Managed Serv




istory mail

t Snapshot

t

P

GAS (Global

Principles:

ne the structure istration hierarcremember the apable of suppo

Ma

on story ovals

vice

vice

Edit

Please do not use

Once new userallows the propamended. Anyor that of users

Agent System

:- Delegat

and the permisschy within the Gmotto ‘measure

orting.

anage Users

t User ID

Full name

xxx xxx x

xxxx

xx xx

xxxx

xx xx

xxxx

e your browser bac

rs have been creperties and detay user can edit eis below it.

GAS

m) – User Guide

ted Admin

sion levels you wGAS system. Ale twice, cut onc

e

Department name

x x

xxxxxxxxxx

x xxxxx xxx

x xxxxxxxxxxx

ck button. To retu

ated, the edit buils for each user ither it’s own de

(Global Ag

e – Retail Cert

nistration

wish to create asthough it is pos

ce’. Below are t

Official position

Zipcod

xx xxxx x

xx x

xx x x

rn to past pages c

utton to be tails

To adbuttothe n

ent SystemEditi

ificate Issuanc

n:-

s a Account Admssible to edit ththree examples

p de

Address T

xxx xx x xxxx

xxx xxx xxxxxxxx

xxxxxxx xxxx

click Back within th

dd new users clicon and completeext page.


ce

ministrator beforhe permissions fs of Delegated

TEL Email address

xx xxxx

xx xxxx

xx xxxx

he page body.

ck on the e the web form a


Page 16 o

re you begin to for users in the Administration

User permissions

Administrator

Manager

Staff in Charge

as shown on

of 23

©

2007 GlobalSign

Men Certifica

New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Order Add SSL AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out

22.

FO

n Ltd.

nu




naged Service SSL Managed S

L Managed Service




istory mail

t Snapshot

t

Plea

Certificat

For all users, clicOrganizationSSL

GAS (Global

on story ovals

Service Bulk

e Deposit

ase do not use you

te Manage

cking on the NewL to be purchase

Agent System

New use

• User ID

• Password

• Password

• Organiza

• Departme

• First Nam

• Last Nam

• Job Title

• Street Ad

• Street Ad

• City

• State or C

• Zip Code

• Other add

• Telephon

• Fax (inc. r

• Email Add

• User perm

• E-mail a U

• Certifiact

• Deposit P

ur browser back b

ement – N

w Certificate Apped from the acco

GAS

m) – User Guide

r registration

d

d(confirmation)

tion Name

ent

me

me

ddress 1

ddress 2

County

/ Postal Code

dress info

ne (inc. region cod

region code)

dress

missions

User Guide?

te Approval Perm

Purchase Authorit


New Certif

plication link froount. The proce

(Global Ag

e – Retail Cert

page

XXXXXX

de)

ission true

ty true

Back

o past pages click

ficate App

m the Main Meness for each certi

All uthe a

Userthe aDepPermwebSo foperm

Sele

• U

• CeAPe

ent SystemEditi

ificate Issuanc

X_

false

false

k Back within the p

plication

nu will allow eithificate was cover

sernames for thaccount ID.

rs are created asability to create

posit Purchase Aumissions are allob form. or example to crmissions:-

ect:-

ser permissions

ertifiacte pproval ermission


ce

page body.

her a DomainSSLred in Section 6

is account will b

s managers or as additional memuthority and cercated with the f

reate a Manager

true fals

true fals


Page 17 o

L or

be prefixed with

s staff. Managermbers of staff. Thrtificate Approvafinal section of th

r with both

se

se

of 23

s have he al he

©

2007 GlobalSign

23.

Fic Ii

Men

CertificaNew CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Bulk OrdAdd SSDeposit AccountView/Re AccountAmend CManageChange Change E-mail hView em Account Sign out

ValidityPeriod

1 years

1 years

DCan

n Ltd.

Certificat

For all users, clicissued or appliedcertificates can b Issued certificatein the chain to th

nu




naged Service SSL Managed Se

der SL Managed Se




istory mail

t Snapshot

t

y d

Number of

licenses 2

1

Date of ncellation

PaS

Please d

GAS (Global

te Manage

cking on the Certd for through thbe re-issued, rev

es can also be dohe GlobalSign Roo

C

on story ovals

ervice

ervice

Welstatapp

•

•

•

•

•

•

(2 A

E

Common nam

www.ABCdom.c

www.ABCdom.

ayment Status

StatuRefu

do not use your bro

Agent System

ement –Ce

tificate Applicathe Account. Thisvoked or cancelle

ownloaded in .Cot CA certificates

Certificate Ap

come to the SSL Mus of requested d

prove outstanding

Order Number na

Certificate name

Corporate ID

Common Name

Order date e.g. 07/30/2007

Issue date e.g. 07/30/2007

Among cases 1~

Edit Renewal

me Corporate

com PAR0050

.org PAR0050

us of und

owser back button

GAS

m) – User Guide

ertificate

ion History link fs menu allows thed part way thro

CER or .PKCS#7 fos)

pplication Hist

Managed Service Cdomains, make new orders.

me

2)

Order numbe

CE20070827108

CE20070827108

e ID Company name

09 ABC Inc.

09 ABC Inc.

Serial Num

01000000000114

n. To return to pas

As the numinformationand manip

Search foselect ‘Al

Clicking be altere

Clicking torder, incthe certifdetails)

Seria

(Global Ag

e – Retail Cert

Applicati

from the Main Mhe lifecycle of eaough the applica

ormat (PKCS#7 fo

tory page

Control Center. Usw applications for

~

~

r Produc

7 Organizatio(PV)

7 Organizatio(PV)

Order St

Issue com

Applicacomple

mber

4a3b186bb

st pages click Bac

mber of certificatn to a CSV (Comulate via a sprea

or orders here vial certificates’ to

allows the d (For example,

the order numbcluding the abilificate as a PKCS#

al numbers for is

ent SystemEditi

ificate Issuanc

ion Histor

Menu will presenach certificate toation process fro

ormat also includ

e the Control Cenr certificates on ap

ct CertificatType

onSSL non

onSSL non

tatus Date

pleted 08/2MT

tion eted

08/2MT

ck within the page

tes increases it isma Separated V

adsheet program

a alternative seahighlight all rec

contact details f e-mail alerts for

er displays the fty to re-issue, re

#7 file. (See the fo

ssued certificate


ce

ry

nt details of all ce be managed in

om within this m

des the intermedi

ter to view the vetpproved domains,

te New/transferenew

New

New

e of Order Iss

26/2007(GT+00:00)

08/GM

24/2007(GT+00:00)

body.

s possible to outValues) file and thm such as Excel.

arch criteria, or sords.

for a specific ordr expiring certific

full details of theevoke, or downlofollowing pages f

es are listed here


Page 18 o

ertificates detail. The

menu.

iate certificates

tting and

r/

sue dat

/26/200MT+00:0

put all hen to edit

imply

der to cates)

e oad for

e.

of 23



24. Certificate Application History – Edit Certificate Details

Certificate Order Details

Contact details can be modified here

for renewal notifications.

CSR details are given here

The certificate in .cer format is

given here

Certificate Details

The certificate in pkcs#7 format is

given here

The billing contact details are

given here.

The Certificate Lifecycle Management tools have the following functions

Cancel the order within a specified number of days and the refund policy will allow the funds to be added back to the account.

Certificates that need to be revoked can be revoked here. Please ensure that your internal processes and procedures are followed for revocation.

If for some reason you lose or destroy the private key for the certificate, then pressing this button initiates a process to enter a new CSR (Generated on your web server with a new private key) which can be used to re-issue the certificate. All fields (O/L/S/CN etc) will remain the same as the previously issued certificate.

This button is similar to the cancellation request above, with the exception that it initiates the purchase process and pre-populates the fields with the previous data for speed. Please note that the same refund policy period applies.

The order summary screen (seen by clicking on the order number from the previous page) and the Edit

certificate details screen, seen by clicking the button both present highly detailed summary of the information about each individual order. The important areas of this summary are highlighted in the diagram on the left:-

• Certificate Order details • The ability to amend contact details • The CSR used to process the order • The issued certificate in CER format • The issued certificate in PKCS#7 format • Details of the optional Billing Contact • Certificate Lifecycle Management tools.

©

2007 GlobalSign

25.

FAun

Men Certifica

New CerCertificaPending Deposit Create BAdd Dep SSL ManCreate Bulk OrdAdd SSDeposit AccountView/Re AccountAmend ManageChange Change E-mail hView em Account Sign out

26. To upgrade

SCA

The accounOrganizatio https://ww

Click thismenu to

n Ltd.

Certificat

For the account Approvals link frusers without ceneed secondary

nu




naged Service SSL Managed Se

der SL Managed Se




istory mail

t Snapshot

t

Upgradin

e your account t

SSL Managed ServCreate SSL ManagAdd SSL Managed

nt will then be conSSL certificate

ww.globalsign.co

s button in comb approve severa

GAS (Global

te Manage

administrator arom the Main Meertificate approvy approval. The re

Pe

on story ovals

ervice

ervice

Please do not

g to an SS

to a ManagedSS

vice ed Service Bulk Or

d Service Deposit

onverted to a Mes. The full user

om/resources/us

bination with thal orders at once

Agent System

ement –Pe

nd all users withenu will present

val permissions welevant orders to

ending for app

Order number

Appn

CExxxxx xxxx

CExxxxx xxxx

CExxxxx xxxx

CExxxxx xxxx

use your browser

SL Manag

SL account, you s

rder

Managed SSL acc guide is located

serguides/manag

e tick boxes on t.

GAS

m) – User Guide

ending Ce

h certificate apprt a list of orders pwill appear here.ogether with a s

proval

plication name

Prod

x Domai

x OrganSSL

x Domai

x OrganSSL

back button. To r

ed Service

simply need to p

count with the ad here:-

gedssl.pdf

the left hand

The altelink. Th

(Global Ag

e – Retail Cert

ertificate A

roval permissionpending approv. If all users havesummary of the

duct Certifica

Type

inSSL xxx

ization xxx

inSSL xxx

ization xxx

T

return to past page

e Account

place a deposit v

dvantage of pre

ernative cancellahis allows severa

ent SystemEditi

ificate Issuanc

Approvals

ns, clicking on thval. Please note te approval permorder are displa

ate e

New/tran-sfer/renew

New

New

New

New

To Cancellation Me

es click Back with

t)

via the SSL Mana

e vetting which s

ation menu can l orders to be de

To Ap


ce

s

he Pending Certithat only ordersissions then no yed.

Validity Period

Numo

licen

1 Year 1

1 Year 1

1 Year 1

1 Year 1

enu

hin the page body.

aged Service me

supports acceler

be reached by senied at the sam

proval Menu


Page 20 o

ificate raised by orders will

mber of nses

Common name

xxx

xxx

xxx

xxx

enu.

rated issuance o

electing this me time.

of 23

Certificate amount

xx

xx

xx

xx

of



27. Deposit Management - Create Bulk Order & Add Deposit Once an account has been created the Deposit Management tools can be used to ‘top up’ the account. The Create Bulk Order is best if you know the number of Certificates you wish to purchase. Important Note. Please be aware, that if you wish to add ‘additional’ domains to your account then this is the method you will need to follow as domains can only be added when additional funds are deposited. Important Note. The Rank (Discount Level) of the account will be preserved when ‘topping’ up the account, so long as the expiry date for the funds has not been exceeded. This can be viewed in the Account Snapshot section of the main menu.

Create Bulk Order.

Use the tool on this page to create a custom Bulk Order to meet your exact certificate requirements. You can add exact deposit to be spent on both DomainSSL and OrganizationSSL Certificates. For SSL Managed Service users, ensure you select OrganizationSSL as the Certificate type when creating your Bulk Order. Your discount levels are determined by the total deposit amount. To help, please view the discount table below. Your discount will automatically be calculated as you create your Bulk Order. Alternatively, if you would prefer to deposit a lump sum click Add Deposit

Rank

PAYG pricing

Bulk purchase

pricing

Discount off PAYG pricing

1 XXXX XXXX XX%

2 XXXX XXXX XX%

3 XXXX XXXX XX%

4 XXXX XXXX XX%

5 XXXX XXXX XX%

Edit Delete Product Certificate Type Order Type Validity Period

Number of

Licenses

Set Custom

start/end

Extend Renewal

Fixed Price

Discount Amount

DomainSSL Wildcard Renewal 2 years 8

XXX XXX

OrganizationSSL SubjectAltName Switch from Competitor 4 years 2 XXX XXX

XXX XXX

Rank 3

Total XXX XXX


Direct purchase of deposit.

• Account Balance XXX : 13,455

• Deposit amount

Use this table to determine the Rank you would like to achieve with your total purchase. PAYG (Pay As You Go) highlights the pricing you would achieve in buying single certificates. As you add certificates types you will see the Rank Summary change and additional discounts being achieved. Note at this stage you are NOT purchasing anything, this is merely a calculation tool to allow you to work out want certificates you need. If you simply want to add a fixed size of deposit, click on the Add Deposit link above.

Select the attributes of the certificates you wish to purchase such validity period, or number of Licences. And Click on Add. Once you have finished click on Purchase to follow the process of paying by credit card and adding domains. Please note that if you change the Organisation details for the account GlobalSign will need to re-validate the existing domains and the new information

Your existing Rank is highlighted here, based on the amount of credit you currently have in the account.

Enter the amount and click purchase to continue….



28. Additional information:- The final section of this guide provides some useful background information on SSL certificates. For specific troubleshooting information on particular web servers, please refer to the GlobalSign Support web site which is constantly being updated with useful tips and guidance. http://www.globalsign.com/support/index.html

29. GlobalSign Root Certificates:- As the GlobalSign (Top) Root CA is included in all mainstream browser software and operating systems:-

It is unnecessary to install the Root certificate on to your web server or web hosting control panel, however good security practice dictates that GlobalSign provides an intermediate certificate from which it signs end entity certificates. The intermediate certificate will be delivered along with the end entity certificate, so it is vital that both certificates are installed onto the web server. Again more specific details can be found on:- http://www.globalsign.com/support/index.html

Why is it necessary to install the intermediate? This is the basic principle of PKI (Public Key Infrastructure). By having a cryptographically secured certificate chain back to a trusted Root certificate, users can rely that the certificate they are viewing actually does belong to the entity which provided it. Examples of certificates which are not trusted because they do not chain up to a trusted root are highlighted on the following pages.



Microsoft’s IE7 (Available on Windows XP Service pack 2 systems and on Windows Vista® ) rather than presenting a small warning to users, which previously was sometimes ignored, now clears the entire web page and presents a very visible message with clear instructions not to proceed, so it is vital that you correctly install your GlobalSign SSL certificate and the associated intermediate certificates.

Users who choose to ignore the warning are presented with an address bar where the background turns red and the Security Status window indicates a certificate error, which is very damaging to the perception of your product or service in the eyes of a customer.

Documents

GAS User Guide - Retail 1.2 - GlobalSign