Certificate Details Order Summary Full Order Details User & Contact Details GCC Log GCC Audit Log...

Transcription

1 GlobalSign Enterprise Solutions SSL Managed Service Quick Start Guide Managing EV and non EV SSL Certificates Across Your Organizationn Effectively

2 TABLE OF CONTENTS Introduction... 4 Advantages of SSL Managed Service... 4 Creating An Account... 4 Logging In... 6 Ordering Certificates... 6 For Pre vetted Domains Adding SANs Using Public Ordering Page... 8 Activating Public Ordering Page... 8 Configuring Public Ordering Page... 9 Approving Orders Pricing, Payment Options & Billing Discount Structure & Getting Best Discounts Payment Options Bulk Orders/Depositing Funds into Account Create Bulk Order Add Deposit How to Pay for Your Bulk Order/Deposit Depleted Deposits View/Request Invoices View Requests for Payments View Statements Outstanding Funds Managing & Reporting on Orders Searching for Certificates Quick Access Reports Tab Detailed Custom Reports Tab Search Results Certificate Actions Reissue a Certificate Renew a Certificate Revoke a Certificate Download Certificate File Cancel a Certificate Change User Associated with Certificate Add/Remove SANs Delete AutoCSR PKCS

3 Certificate Details Order Summary Full Order Details User & Contact Details GCC Log GCC Audit Log Manage Domains & Profiles Set User Permissions Add New Domain Edit Profile Upgrade to EV Level Vetting User Management User Roles Manage Users New Users Edit Users Change Administrator Change Billing Manager Useful Functions Account Management Amend Account Details View All Received s Account Snapshot CSR Parser Getting Help... 23

4 INTRODUCTION The GlobalSign Certificate Centre (GCC) is a highly flexible, web based certificate lifecycle management portal. The GCC centralizes Certificate management, including all types of GlobalSign Digital Certificates and allowing for multiple users. Managed SSL (MSSL) is a solution available via GCC. ADVANTAGES OF MSSL Utilizing a Managed SSL service offers many advantages over managing individual Certificates. Complete Certificate lifecycle management An enterprise can control application, issuance, re issuance, renewal and revocation of Certificates across many departments. Pre vetting of domains allows for instant issuance to any domain under main TLD (Top Level Domain) Immediate discounts and savings Immediate discounts over buying individual Certificates and flexible payment options allow organizations to Pay As You Go, purchase in bulk or order multi year Certificates No infrastructure or personnel overhead GlobalSign runs WebTrust certified certificate factory, enterprises just log in and manage certificates Advanced Delegated Administration Administrators have ability to create additional users with defined roles and appropriate privileges. User rights can be assigned at domain level. Approval based model Administrator and users with Approver privileges decide wher applications should be issued ( alerts sent to Approvers) Audit logging All general account activity (e.g., applications and issuance times, method of application) is logged and exportable, ensuring compliance requirements are met Comprehensive reporting and auditing functions report on spend, certificates, upcoming renewals, etc. Billing management allows organization to view and download invoices and automatically create new downloadable quotes for internal authorization Malware monitoring HackAlert malware scanning monitors up to three registered domains for injections of malicious code and alerts owner if any is found, allowing for quick removal CREATING AN ACCOUNT Create an account by visiting ssl and clicking Buy Now. 1. Choose your most convenient local GlobalSign office. GlobalSign has multiple offices around world, operating in local languages, currencies, and time zones. 2. Enter basic information, such as organization name, address, and contact details. 3. Create account administrator by entering details of person who will have full control over all of account functions and features.

5 Account contact details entry page Ensure that GCC User ID is memorable. GlobalSign will append an account ID (PAR ID) number to front of whatever you enter as your User ID (e.g., PAR00111_username). GCC passwords must be alphanumeric. Use of special characters in your chosen password will cause problems with your account. 4. Choose your vetting level: organization level (OV) or extended validation (EV). OV Upon completion of your application a vetting agent will verify your submitted details against third party databasess and public information repositories. In event that agent is unable to locate sufficient information, he/she will contact you for additional details. o Vetting time: within 2 days o Vetting Criteria: Domain control, Organization Name, Organization Address EV Being vetted to an EV SSL standard requires additional company identity checks and right to apply checks. At final stage of application you should print out and complete View & Print Request form and have form signed by an authorized signatory of your company. o Vetting time: within 5 days o Vetting Criteria: Domain control, Organization Name, Organization Address, Right of Applicant to apply for SSL on behalf of organizations Fax your vetting documents to your regional office. NORTH AMERICA vetting@globalsign.com Fax: Tel: UNITED KINGDOM vetting@globalsign.com Fax: Tel: EUROPEAN UNION vetting@globalsign.com Fax: Tel: Specify domains to be pre vetted. greatly accelerate issuance process. MSSL offers you ability to use pre vetted identities to All domains you list here will be available for immediate issuance once your information has been vetted and your account approved.

6 You can add more than one domain at a time by clicking add a row button. Please do NOT include https or www part just domain and top level domain (TLD), e..g. globalsign.com. By entering domain.com here, you will be able to subsequently order Certificates for mail.domain.com, orders.domain.com, etc. 6. Confirm all details you have submitted and agree to terms and conditions of sale. 7. You have reached end of application process. within account. An will be sent to address listed LOGGINGG IN Once your Managed SSL Account has been approved, you can log into GlobalSign Certificate Center (GCC) straight away to start managing lifecycle of your SSL Certificates. Go to and click Customer Login. Enter your User ID and Password. Your User ID is PARXXXX xxxxx number given to you at end of MSSL signup process. You can also find it in your Welcome . Your Password is password you entered during signup process. If you have difficulties logging in or forget your password, please contact Support at You will only be able to order Certificates once vetting of your organization and domain names has been completed. You can check your vetting statuss anytime by logging into your account. ORDERING CERTIFICATES FOR PRE VETTED DOMAINS You can quickly order Certificates for pre vetted domains right from your account homepage. Upon logging into GCC, you will be presented with a list of domains vetted in your account along with level of vetting that was applied to m (i.e., OV or EV). MSSL home screen

7 1. Click Order Certificate to begin Certificate application process for one of your pre vetted domains. 2. The application workflow will display product and options available based on that domain s vetting level. First stage of order process 3. After specifying your Certificate details, you will be prompted to enter Certificate Signing Request (CSR). If you do not have a CSR, you can use AutoCSR delivery method and we will generate one for you. Many of details needed for AutoCSR will be pulled from profile from which you re ordering. Fill in any remaining details and enter an alphanumeric password you will need when installing your Certificate. CSR entry stage with AutoCSR option selected.

8 4. The next stage asks you to confirm Secure Site Seal Information. This information will be displayed to anyone who clicks on Site Seal displayed on your website. Vetted information such as Company Name may not be changed, however, for departmental flexibility and contact details flexibility, you may specify most appropriate Site Seal information. GlobalSign Secure Site seal and example organization details that appear when seal is clicked. 5. Select payment method you wish to use. Credit card Once your Certificate has been issued from our system, your card will be charged full amount. Payment by Deposit Use funds already in your account. If order is placed by someone without approval privileges your account will be debited upon issuance of Certificate, orwise your account will be debited immediately. 6. Finally, review Subscriber Agreement, check approval box, and you will be finished with application process. Your Certificate will now be issued. If user ordering Certificatee does not have approval privileges, order will need to be approved by a user with approval privileges before issuance. ADDING SANS Standard SSL Certificates secure a single Fully Qualified Domain Name (FQDN). By adding SANs a single Certificate can secure multiple server names such as or domain names, subdomains, IP addresses and local host names. If selected you will enter SANs on SANs page and total cost of Certificate is n calculated. You may specify up to 40 SANs per Certificate. Certificates applied for using SSL Managed Service menu may contain multiple domain names when using SANs option. In orderr for a SANs Certificatee to be issued immediately, you may only specify domain names in SANs field that have been pre vetted and are available in your pre vetted domains list. USING THE PUBLIC ORDERING PAGE SSL Managed Service offers ability for organizations with distributed offices or departments to centralize Certificatee buying process. You can publish a unique application page (Public Ordering Page or POP) so anybody within your organization can apply for a Certificate. The URL can be given to applicants or hosted on your intranet. The Certificate will not be issued until a User with Approval privileges logs into account and approves application this ensure organizations issue Certificates only to legitimatee applicants. ACTIVATING THE PUBLIC ORDERING PAGE To activate POP for a pre vetted domain, select Managed Domains & Profiles under Managed SSL section of left navigation menu. This will bring you to a screen that lists your domains and Certificate profiles.

9 Managed Domains & Profiles screen Find Certificate Profile for whichh you would like to create a POP and select Activate Public Order Page in rightmost column, Profile Actions. When Public Ordering Page screen appears, check box for Activate Public Order Page and click Submit.This will bring up POP URL, as well as configuration options. Seee Configuring Public Order Page section below for details. This page allows you to Activate Public Order Page for a Certificate. Similarly, you can deactivate Public Order Page by navigating to Managed Domains & Profiles page and selecting Edit Public Order Page in rightmost column, Profile Actions. From re, simply uncheck box next to Activate Public Ordering Page and click Submit. CONFIGURING THE PUBLIC ORDERING PAGE Selecting Activate Public Order Page for a Certificate brings up POP configuration options. Within POP you have option to upload your corporate logo. Please note image must be in format GIF, PNG, or JPG with dimensions no greater than 200x100. Select fields you would like to have displayed on POP by checking corresponding boxes.

10 POP Configuration page Certificate Type(s) Please note that it is possible to select more than one of se options if you would like to give recipient some flexibility or if you do not know exact details at time of configuration. o Single Domain Certificatee is issued to (and will contain domain.com in SAN field) and can only be used on thatt FQDN. o Wildcard SSL Certificate is issued to *.domain.com and can secure all sub domains of domain.com across your entire server farm. o Public IP Address SSL Certificate is issued to an IP address that is accessible over internet and will take form of XXX.XXX.XXX..XX, for example o Subject Alternative (SANs) Options will allow you to configure any SANs that you require for Unified Communications, specific sub domains, netbios names, and IP addresses. Validity Period Select how long you would like Certificate to be valid for, to maximum allowed for that particular product (OV = 5 years, EV = 2 years). Switching from a Competitor Choose this option to allow applicants to trade in a competitor s Certificate. Trade ins get furrr benefits, such as deeper discounts, any time remaining on ir old Certificate transferred to new Certificate, and an additional 30 days added to validity period of Certificate. If you want applicants to only place new orders, leave this option unchecked. Add Authorization Code To enhance security, you can choose to require a passphrase with an application request so an applicant will have to input code before proceeding with an application. If you choose this option, please ensure that you communicate passphrase to your POP recipient outside of GlobalSign system. We do not recommend plain text e mail for this communication. Digitally signed and encrypted is our preferred method. Payment Choices You can choose to have fixed payment method, meaning all costs willl be deducted from any bulk funds you have in your account, or allow POP applicant to choose at

11 point of order. The applicant can choose to use existing Account funds, pay via Purchase Order, or use a credit card. You must turn on option for credit card if you want to make it available to applicants. You also have ability to display custom fields for your environment. For example, if you require an employee number with every request, this can be added as a custom field to your POP. You can make any or all of se fields mandatory. Any custom fields you create will appear under Contact Information on POP itself. Click Custom Fields tab on POP Configuration Page to modify and create fields. Once you have finished configuring your POP, click Submit at bottom of screen. You will be asked to review and confirm configuration. Select Complete at bottom of page to finalize your POP. You can now pass URL on to appropriate individuals or host on your intranet. You can modify POP at any time by navigating to Manage Domains & Profiles from Managed SSL menu to left of your screen and clicking Edit Public Order Page. APPROVING ORDERS Applications made by Users without approval privileges or applications made using Public Ordering Page must be approved by a User with approval privileges. When such applications are made, an alert will be sent to Account Administrator and Certificate will not be issued until Administrator has approved application. Administrators and Users with approval rights can access ir lists of pending orders by selecting Pending Approvals from Managed SSL section of left navigation menu. Each order will have a checkbox next to it. Select orders you would like to modify and click Approve or Reject depending on required action. PRICING, PAYMENT OPTIONS & BILLING DISCOUNT STRUCTURE & GETTING THE BEST DISCOUNTS All enterprise customers buy GlobalSign SSL Certificates at a discount. The discount levels are set by amount of funds deposited into your Account. All enterprise customers initially have default level of discount, detailed as Rank 1 in example table blow, and receive this discounted pricing every time y purchase a Certificate. In order to obtain highest discounts, you must bulk purchase / deposit funds directly into your account. Discount levels displayed are discounts of standard Pay As You Go pricing and not SRP (Standard Retail Price) of GlobalSign SSL. For SRP of SSL Certificates please visit SSL Certificates section of your regional GlobalSign web site. Rank PAYG pricing Bulk purchase pricing Discount off PAYG pricing 1 $ $ % 2 $ $ % 3 $1, $1, % 4 $3, $2, % 5 $7, $4, % Example discount pricing. Actual pricing may vary.

12 Rank 1 is standard Pay As You Go pricing base discount level. In this example, to progress to Rank 2 you would need to add $ 785 to your account, reby automatically giving you a 12% discount over standard PAYG pricing. Once you ve created bulk contracts / deposited enough funds to elevate you to a higher Rank, you stay on that rank for a 12 month period. If you create any furr bulk contracts / deposit additional funds during 12 month period, discount period is automatically extendedd by 12 months. In or words, as long as you createe bulk contracts / deposit additional funds before 12 month period expires, you will maintainn your current discount rank. The process of upgradingg your rank (and hence discount) is automatic (alternatively, contact your Account Manager) and can be done form within your account by adding funds to your account balance. The next section outlines process for adding funds. PAYMENT OPTIONS BULK ORDERS / DEPOSITING FUNDS INTO ACCOUNT Using Deposit Funds option gives you best discount. To be able to pay for Certificates using deposited funds, you must first deposit funds into your account by clicking Create Bulk Order or Add Deposit in Financial Management section of menu on left side of your screen. CREATE BULK ORDERR This option allows you to add exact funds required for a particular order. Click Create Bulk Orderr under Financial Management section of left navigation menu, select product details for first Certificate you need, and click Add. Repeat until you have added all products you require for a particular order. As you add products total Deposit needed will be summed. If total Deposit needed exceeds a Rank level, you will be promoted to next Rank Level where you will enjoy higher discounts. Bulk order wizard Upon clicking Purchase button, you can deposit appropriate amount of money into your account via Purchase Order or Credit Card. Summary of order and payment process for Bulk Order

13 ADD DEPOSIT If you simply want to addd a set amount of funds to your account, not based on a specific order, you can choose to addd a deposit at any time. Click Add Deposit under Financial Management section of left navigation menu to input exact amount of money thatt you wish to add to your account. Once you have specified amount, you will be taken to payment process. If total Deposit needed exceeds a Rank level, you will be promoted to next Rank Level where you will enjoy higher discounts. Add deposit option HOW TO PAY FOR YOUR BULK ORDER / DEPOSIT Complete steps for Create Bulk Order or Add Deposit as detailed above to add funds to your account. You have two payment options to settle deposit amount. Bank transfer Payment in Arrears Select to pay for deposit via Purchase Order. Funds will be added to your account after our finance department receives Purchase Order via . Credit Card You will be asked to provide details for selected Credit Card before Deposit amount is added. The credit card is charged immediately. When buying Certificates using funds you have deposited, be sure to select Deposit as Payment Option at payment point in purchasing process. DEPLETED DEPOSITS If you deplete your current deposit you should add additional deposit or alternatively you may downgrade to a Pay As You Go account. If you buy using Pay As You Go, you can pay by credit card for individual Certificates as Certificate is issued. Pleasee note that your pricing will be reset to standard Pay As You Go levels, refore in orderr to maintainn current discount levels you should always add an additional deposit. VIEW/REQUEST INVOICES Click View/Request Invoices under Financial Management section of left navigationn menu to view all invoices that have been generated in association with your account. Invoices will appear here 8 days after issuance of Certificate. You can search by invoice number, date, and correspondence status to quickly find any given invoice.

14 Customers paying via Deposit will still receive an automatically generated invoice for every Certificate seven days after delivery date. If you have already paid your Deposit, invoice is provided for information purposes only. VIEW REQUESTS FOR PAYMENT List of available invoices, with option to download to PDF Click View Requests for Payment under Financial Management section of left navigation menu to display any Requests for Payments ( RFPs) that you have associated with your account. Please note, Status will always say Payment expected by check or bank transfer wher it has been paid or not. For your convenience, search parameters are included to make it easy to find specific RFPs. List of available RFPs, with option to download to PDF Customers placing a Deposit into ir GCC account will receive a Payment Request for advance payment unless Deposit was paid by Credit Card at point of ordering. VIEW STATEMENTS OUTSTANDING FUNDS Click View Statements under Financial Management section of left navigation menu to view a snapshot of how much money is outstanding within your account. This is sum of all Certificate values minus what you have paid GlobalSign.

15 Snapshot of any outstanding funds in your account MANAGING & REPORTING ON ORDERS SEARCHING FOR CERTIFICATES Click Report My Certificates under Managed SSL section of left navigation menu. your reporting interface to access orders and Certificates. This brings you to My Certificates screen search your Certificates database using a variety of criteria QUICK ACCESS REPORTS TAB The Quick Access Reports tab on this page offers many options for viewing your Certificates Upcoming renewals Configurable for next 7, 30, 60, and 90 days, this function will return a list of all Certificates due to expiree within specified timeframe. This list can be exported to a CSV file. For added convenience, Certificates within renewal range (14 to 90 days) will also be listed on home screen of your MSSL account. Incomplete orders View orders that have yet to be completed (e.g., waiting on approval, vetting not yet completed, or application not completed) Find a specific order Search by eir Certificate Orderr Number or Common Name (domain name in Certificate) Find all orders Search eir by application date and/or issuance date

16 DETAILED CUSTOM REPORTS TAB The Detailed Custom Reports tab allows you to make very granular searches based on product type, GCC user, etc. Custom order history screen SEARCH RESULTS Clicking Search after defining your search parameters brings up a results page that displays summary information about your orders that fit defined criteria. When list of Certificates appears, you will notice several quick action icons next to each order. If Certificate is within renewal period, a Renew option will also appear. See Certificate Actions section below for details about Certificate activity. CERTIFICATE ACTIONS REISSUE AN SSL CERTIFICATE If you need to reissue a Certificate in case of corrupt / broken keys, server reinstall, etc., you can do so directly through your account. 1. Click Report My Certificates and use search functionn to find Certificatee you need to reissue. 2. Once Certificate appears in search results, click Reissuee button. Please note that althoughh you can elect to use a new CSR, DN information from profile will be used. The reissued Certificate will only be valid for period remaining on initial Certificate. RENEW AN SSL CERTIFICATE For your convenience, Certificates within renewal range, ninety days before expiration, will be listed on home screen of your MSSL account along with a button or instantt renewal. You can also renew Certificates through Report My Certificates section 1. Click Report My Certificates and use search functionn to find Certificatee you need to renew. 2. Once Certificate appears in search results, click Renew button. Please note, this button will only appear if Certificate is within renewal range (90 days before expiration). GlobalSign will send a renewal notice to contact associated with order 90 days priorr to expiration of Certificate. See User & Contact Details section below to for information on modifying contacts. If you renew a Certificatee before it expires, GlobalSign will add any remaining time onto new Certificate and give you option of an extra 30 days free of charge.

17 REVOKE A CERTIFICATE If your server and / or private keys have been compromised n you will want to revoke Certificate. This will cause any visitors to associated website to receive a pop up warning of Certificate status and instructing m not to trust site. This will add Certificate serial number to GlobalSign CPL and OCSP servers, which are n propagated across Internet. 1. Click Report My Certificates and use search function to find Certificate you need to revoke. 2. Once Certificate appears in search results, click Revoke button. DOWNLOAD CERTIFICATE FILE If your order was an AutoCSR, n this will download.p12 file (containing private key + Certificate). If you used a standard CSR during application, this will download intermediates + end entity Certificate. 1. Click Report My Certificates and use search function to find Certificate for which you need to download file. 2. Once Certificate appears in search results, click Get Cert button. CANCEL A CERTIFICATE This option will be available for 7 days after issuance of Certificate. Choose this to completely cancel your order and have funds credited to you (via original payment method). 1. Click Report My Certificates and use search function to find Certificate you need to cancel. 2. Once Certificate appears in search results, click Edit button to bring up Order Details screen. 3. Make sure you are on Order Summary tab, and click Cancel under Certificate Actions menu in right column. CHANGE USER ASSOCIATED WITH CERTIFICATE This assignment dictates who will receive renewal notices associated with Certificate. Whoever applied for Certificate is automatically assigned this role, but user can be changed. This function is especially useful during employee and role transitions within an organization. 1. Click Report My Certificates and use search function to find Certificate you need to cancel. 2. Once Certificate appears in search results, click Edit button to bring up Order Details screen. 3. Make sure you are on Order Summary tab, and click Change User under Certificate Actions menu in right column.

18 ADD/REMOVE SANS This option will enable you to change Subject Alternative Names configuration of your Certificate. SANs allow addition of or domain name, subdomains, or hostnamess into a single SSL Certificate. The type of SAN option available here is dependent on Certificate type (for example, netbios names are not permitted in EV Certificates). 1. Click My Certificates and use search function to find Certificate you need to cancel. 2. Once Certificate appears in search results, click Edit button to bring up Order Details screen. 3. Make sure you are on Order Summary tab, and click Add/Remove SANs under Certificate Actions menu in right column. DELETE AUTOCSR PKCS 12 This option allows you to delete.p12 file for this Certificate from our servers. Please ensure that you have a backup of it before performing this action as it cannot be undone. 1. Click My Certificates and use search function to find Certificate you need to cancel. 2. Once Certificate appears in search results, click Edit button to bring up Order Details screen. 3. Make sure you are on Order Summary tab, and click Delete AutoCSR PKCS 12 under Certificate Actions menu in right column. CERTIFICATE DETAILS After performing a search for Certificates, you can click Edit next to any Certificate found in search results to see details regarding that order. Complete order details, found under Edit button

19 ORDER SUMMARY The Order Summary tab displays top level information regarding order. Details such as product, price, and validity period are shown. You can also find Certificate files in various formats here. Key actions relating to Certificatee lifecycle are performed from this screen. For more information on se actions please see Certificate Actions above. FULL ORDERR DETAILS The Full Orderr Details tab provides all information relating to a particular order, such as download status of.p12 file, second half of.p12 password, and any SAN options. You can also copy and paste CSR and issued Certificatee from this screen, should need arise. USER & CONTACT DETAILS This screen allows you to view and edit user with whom this order is associated. changes made here will not be domain wide and only apply to this particular order. any changes. Please note thatt any Click Update to save GCC LOG From here you will see all s that have been sent from system regarding this order. Typically you will see Orderr Confirmation and Order Issuance (with Final Action Needed also listed for EV orders). GCC AUDIT LOG Here are all actions associated with this order, toger with date/time stamps of when events occurred. This screen also specified who performed action, wher it was GlobalSign (SYSTEM) or a user within your account. GCC Audit Log see what happened, when, and by whom MANAGE DOMAINS & PROFILES The concept behind Managed SSL is instant issuance and eased management of Certificates for all domains owned by one account. Accounts can be comprised of one single organization or an umbrella entity (Pro users only), containing multiple companies, branches, and departments. Thesee subdivisions are collectively known as profiles and contain ir own set of domains. Each subsidiary can have its own profile DN data and related domains with appropriate users within subsidiary only ordering for ir own company, while still centralizing management and billing for parent account.

20 In order to upgrade your MSSL account to Pro, where you can have multiple profiles with separate DN information, please contact your Account Manager. Please note, only MSSL Pro customers are able to have more than one profile within ir account. Click Managed Domain & Profiles under Managed SSL section in left navigation menu to access Domain management. Here you ll find a snapshot of your domains and several management functions. Snapshot of domains and management options SET USER PERMISSIONS Click Set User Permissions in Actions column next to domain you would like to modify. bring up a list of all users listed for that domain. This will Users available for selected domain Specify what rights each user should have by checking appropriate boxes. Place orders user can place orders for a particular domain Approve orders user can approve orders placed by him/herself or ors users for a particular domain Revoke Certificates user can revoke Certificates issued to a particular domain ADD NEW DOMAIN Click Add New Domain in Profile Actions column to add anor domain to a profile. For Pro Accounts, please be careful that you are in correct profile when using this as Certificates for new domain will be issued with DN of profile you select.

21 Add new domain to existing Certificate profile. Our Vetting Team will be alerted when a new domain has been addedd to your profile. You can monitor status of your new domain request from Manage Domains & Certificate Profiles page. After your ownership of this domain has been verified by team, you will receive an alert and will be able to issue Certificates to that domain. EDIT PROFILE Click Edit Profile in Profile Actions column to amend details contained within your profile. Pleasee note, if your profile is active this action will suspend account until our Vetting Department have verified new information and re activated it. Changes are not retrospective. UPGRADE TO EV LEVEL VETTING Click Upgrade to EV Vetting Level in Profile Actions column to upgrade a profile vetted to OV level to Extended Validation (EV) level. Appropriate vetting will take place and account will be activated once completed. While upgrading, you will be asked for some additional information to enable us to efficiently vet account. Please have details, such as company number, appropriately authorized personnel, and place of business, available. You will also need to print off an EV request form, provided during application process, and submit to our vetting team. Upon receipt of request form, Vetting Team will send a subscriber agreement to your designated authorized person for signing. To help speed up process, pleasee make sure that we are able to independently verify data you submit. For example, you should enter full legal name of your company (e.g., My Company & Sons, Inc. instead of My Company ). Contact your Account Manager for assistance. USER MANAGEMENT It is importantt to determine structure and permission levels you wish to create as an Account Administratorr before you begin to create a delegated administration hierarchy within GCC system, although it is possible to edit permissions for users in future. USER ROLES You may add additional Users to your MSSL account. Depending on ir privileges, newly created Users may place new Certificatee orders, add Deposit funds, or perform reporting. Users are defined in roles: Account Administratorr This type of user has full control over account with ability to order any type of Certificate, amend account/profile information, and create new Managers and Staff

22 in Charge. An administrator can also see any orders placed by or users within system and can perform actions on m such as re issue, rights and abilities are determined by Account Administrator. Certificate rights, such as application, approval, and revocation, as well as account rights, such as adding funds to Account bulk balance and creating Staff in Charge Users, can be assigned on an individual basis. In event of more than one manager per account, y cannot see each or s orders. In event of manager one, for example, being out of office and a Certificate ordered by him needing to be re issued, only administrator could perform that task as or managers would not have access to that order. Staff in Charge Userss at this level have ir administration rights (e.g. Certificate application, approval, or revocation and adding funds to Account bulk balance) defined by Account Administrator or Manager. Unlike Account Administrators and Managers, Staff in Charge cannot create additional cancel, revoke, etc. Manager Managers administration Users. MANAGE USERS Click Manage Users under Account Management section of menu to left of you screen to add, edit, or deletee users of your account. User management screen NEW USERSS Click New Registration on Manage Users screen to addd a new user to your account. You can assign users to any of three roles previously describedd (Administrator, Manager, Staff in Charge). You can also designate wher individual will have ability to approve Certificates or add funds to Account s bulk balance. EDIT USERS Click Edit next to user you would like to modify. From here you can reset passwords, privilege levels, and contact information. Modify user information

23 CHANGE ADMINISTRATOR Click Change Administrator under Account Management section to promote anor user within account to administrator level. Please note: user must already exist before you can make him/her an Administrator. CHANGE BILLING MANAGER There is only one Billing Manager per account. Click Change Billing Manager under Account Management section to make anor account user dedicated billing contact. This ensures correct person receives invoice notices. USEFUL FUNCTIONS ACCOUNT MANAGEMENT AMEND ACCOUNT DETAILS Click Amend Account Details under Account Management section of left navigation menu to edit any of your company details, including name, address, contact details, VAT number, etc. VIEW ALL RECEIVED S Click View all Received s under Useful Functions section of left navigation menu to view all GCC e mails that have been sent in relation to all orders that have been placed within your account. You also have ability to resend any of s if y have not been received or were caught in spam filters, etc. ACCOUNT SNAPSHOT Click Account Snapshot under Useful Functions section of left navigation menu to display a summary of your account with some key details, such as available funds and discount rank. You can use this as an overview of your account standing. CSR PARSER Click CSR Parse under Useful Functions section of left navigation menu to use online tool to debug any CSR issues. If you try to place an order and CSR is giving you problems, run it through this parser and it should highlight any syntactical errors you may have (e.g., C=UK instead of C=GB). GETTING HELP Every GlobalSign enterprise customer has a dedicated Account Manager who is on hand to help with any commercial and technical queries you may have about reselling SSL. GlobalSign also provides technical support through our Client Service departments around world. GlobalSign US & Canada Tel: sales us@globalsign.com GlobalSign FR Tel: ventes@globalsign.com GlobalSign EU Tel: sales@globalsign.com GlobalSign DE Tel: verkauf@globalsign.com GlobalSign UK Tel: sales@globalsign.com GlobalSign NL Tel: verkoop@globalsign.com