GeTrust Partner User Guide
Table f Cntents Sectin 1: Overview Sectin 2: Certificate Ordering Optins 2.1 Ordering thrugh the GeCenter Web Pages 2.2 Creating a Streamline Autmated Order Prcess 2.2.1 Autmating the Ordering Prcess Using QuickInvite Sectin 3: QuickStart Ordering GeTrust Prducts 3.1 Creating an Initial Supply f Prducts 3.2 Ordering GeTrust and VeriSign Prducts 3.2.1 Hw t rder GeTrust and VeriSign Certificates 3.2.1 GeTrust s QuickSSL Premium and Pwer Server ID Certificates 3.2.1.1 Requesting a QuickSSL Premium r Pwer Server ID certificate 3.2.1.2 Apprving the QuickSSL Premium and Pwer Server ID Certificate 3.2.1.3 Install the QuickSSL Premium and Pwer Server ID Certificate 3.2.2 True BusinessID, True BusinessID with EV and VeriSign Certificates 3.2.2.2 Install the True BusinessID, True BusinessID with EV and VeriSign certificates 3.2.2.2.2 Install a VeriSign Certificate Sectin 4: Authenticatin Prcess 4. 1 Extended Validatin Authenticatin 4.2 Organizatin Authenticatin 4.3 Dmain Authenticatin Sectin 5: GeCenter 5.1 Accessing GeCenter 5.2 SSL Certificates Menu 5.2.1 Ordering Certificates 5.2.2 Establish a New Cntract 5.2.3 Purchase a Blck f Certificates 5.2.3.1 Bulk Purchase Screen Sht 5.2.4 Establish a Pay_As_Yu_G Cntract 5.2.4.1 Pay-As-Yu-G Screen Sht 5.3.1 Reprts 5.3.1.1 Summary Reprts 5.3.1.2 Detailed Reprts 5.3.1.3 Renewal Reprts 2
5.4.1 Custmize Emails 5.4.2 Multiple Language Optins 5.5.1 Accunt 5.5.1.1 Update Credit Card Infrmatin 5.5.1.2 Update Billing Cntact 5.5.1.3 Change Passwrd 5.6.1 Supprt 5.6.1.1 24 x 7 Online Self-Help Supprt 5.6.1.2 Custmer Supprt 5.6.1.3 Technical Supprt 5.6.1.4 API Supprt 5.6.1.5 Cntacting Supprt 5.6.2 Adding / Deleting Administratrs 5.6.2.1 T add a new administratr 5.6.2.2 T remve an existing administratr 5.6.3.1 Re-Issue Plicy 5.6.4 Cancellatin/Refund Plicy 5.6.5 Revcatin Plicy 3
Sectin 1: Overview Welcme t the GeTrust Partner Prgram where ISP s, hsting cmpanies, dmain registrars and resellers f all sizes have the pprtunity create an additinal revenue stream. As a valued partner yu have access t highly cmpetitive discunts, state-f-the-art functinality and a pwerful API t autmate the SSL certificate wrkflw and lifecycle prcesses. The aim f this user guide is t prvide an verview f GeCenter and the varius certificate life cycle functins available. We want yu t be successful in selling digital certificates. This user guide cntains valuable infrmatin abut the varius certificate rdering prcesses, quick start prcedures, prduct infrmatin and imprtant cntact infrmatin. Finally, if yu dn t find what yu are lking fr here, please email us at partnerfeedback@getrust.cm and let us knw hw we can help. 4
Sectin 2: Certificate Ordering Optins As a GeTrust Partner Prgram partner, yu can begin t reap the benefits f reselling GeTrust and VeriSign prducts. The rest f this dcument prvides the necessary infrmatin t successfully use the GeCenter certificate lifecycle management prtal. T rder a certificate frm an active cntract, please fllw the 5 steps belw: 1) Generate the CSR (public/private key pair and certificate) n the Web server hsting the site 2) Submit the CSR and ther rder infrmatin t GeTrust thrugh GeCenter, the API, r QuickInvite 3) GeTrust will carry ut the authenticatin prcess 4) GeTrust will sign and issue the certificate t the requestr 5) GeTrust SSL certificate can then be installed n the Web server 2.1 Ordering thrugh the GeCenter Web Pages Ordering certificates thrugh the GeCenter Web pages may be apprpriate fr partners with lw vlumes, r thse partners that d nt have the resurces t integrate with the GeTrust API. As a general guideline, we recmmend that partners with certificate vlumes f less than 50 units use the GeCenter Web pages. Hwever, partners with high vlumes f certificates can use the GeTrust API t autmate the rder prcess, as sme d tday. See Sectin 3, QuickStart prcedures t begin rdering prducts immediately and Sectin 5 fr instructins n hw t navigate thrugh GeCenter. 2.2 Creating a Streamline Autmated Order Prcess GeTrust ffers a Simple Object Access Prtcl (SOAP) API fr its partners t rder and manage their SSL fferings directly frm their site. Thrugh this API, functins such as rdering different SSL prducts, canceling and fulfilling rders, and querying fr rder data can be perfrmed. The GeTrust API cntains all f the data necessary fr partners t integrate with the entire suite f GeTrust and VeriSign SSL Certificates. This methd may be apprpriate fr large vlume partners r fr thse wh simply want an integrated prcess fr rdering GeTrust and VeriSign prducts. The GeTrust API supprts tw Web Services ORDER and QUERY. The peratins in the ORDER Web Service are fcused arund initiating and canceling rders while the QUERY Web service is fcused n checking the status f rders, btaining fulfillment infrmatin fr rders, reprts, and rder details. 5
Alternatively, the GeTrust Partner Prgram ffers a POST API t autmate the rdering prcess. This ptin requires less develpment wrk and can be implemented by simply creating an HTML rdering page and setting up a client cnnectin t the GeTrust servers n the backend. The GeTrust Partner Prgram has an API specificatin that details hw t use bth APIs. T btain a cpy f the latest API specificatin, please cntact yur sales accunt manager. 2.2.1 Autmating the Ordering Prcess Using QuickInvite QuickInvite is available via ur HTTP Pst and SOAP APIs. It allws the partner t initiate the rder prcess and specify sme, r all, parameters assciated with the rder. The requestr receives an e-mail with the key needed t review and cmplete the rder. This type f rder is especially useful when a partner has sme infrmatin fr the rder, but desires the requestr t prvide the remaining details. QuickInvite is available fr all GeTrust and VeriSign prducts. This feature is easy t implement and is a gd alternative fr partners wh d nt have the resurces fr a full-blwn integratin int the API. Cntact yur sales accunt manager fr mre details. 6
Sectin 3: QuickStart Ordering GeTrust Prducts This sectin utlines the basic prcedures fr rdering the full suite f GeTrust and VeriSign prducts. As mentined in the previus sectin, there are several ways t rder GeTrust and VeriSign prducts fr yur custmers. This QuickStart sectin addresses the prcess f rdering certificates thrugh the GeCenter Web pages. Fr a cmplete descriptin f GeCenter, reference Sectin 5 f this guide. Fr mre infrmatin abut ur APIs cntact yur sales accunt manager. 3.1 Creating an Initial Supply f Prducts When yu purchase a Bulk cntract, an initial supply f the prduct(s) is credited t yur accunt. Yu will have a 1-year cntract that has a dllar and unit balance based n yur rder. Yur balance is decreased as rders are cmpleted. Once yu have depleted yur balance, yu will need t purchase a new Bulk cntract. Yu can d this either nline thrugh GeCenter r thrugh yur sales accunt manager. When yu purchase a Pay-As-Yu-G cntract, a 1-year cntract is created with a zer dllar r unit balance. GeTrust will charge the credit card yu have put n file as prducts are rdered. Yu can set up a new Pay-As-Yu-G cntract nline thrugh the GeCenter r cntact yur sales accunt manager fr mre details n hw t setup a new cntract. 3.2 Ordering GeTrust and VeriSign Prducts The GeTrust True BusinessID Wildcard Server Certificate prvides full, rganizatinauthenticatin and encryptin fr yur custmers nline businesses at a very affrdable price. Plus, this certificate allws custmers t secure multiple sub-dmains n ne server with a single certificate. True BusinessID Wildcard Certificates cme with the GeTrust True Site seal that includes a time and date stamp verifying the current validity f the SSL Certificate and the name f the rganizatin wning the Web site. 3.2.1 Hw t rder GeTrust and VeriSign Certificates T rder a certificate, please fllw the instructins belw. Fr a full descriptin f the prcess, including screen shts, refer t Sectin 5, Ordering Prducts thrugh GeCenter. 3.2.1 GeTrust s QuickSSL Premium and Pwer Server ID Certificates T rder a QuickSSL Premium r Pwer Server ID certificate, yu must cmplete the fllwing steps: 1. Generate a new Certificate Signing Request (CSR) 2. Submit enrllment applicatin nline thrugh GeCenter 3. Receive apprver cnfirmatin request at authrized email address 4. Apprver clicks APPROVE t authrize certificate issuance 5. Receive yur new QuickSSL Premium r Pwer Server ID certificate and site seal by email 7
3.2.1.1 Requesting a QuickSSL Premium r Pwer Server ID certificate Lgin t GeCenter at https://prducts.getrust.cm/gecenter using yur User Name and Passwrd Frm the SSL Certificates tab click n Order Certificates Click n Place Order next t QuickSSL Premium r Pwer Server ID prduct sku Cmplete the fllwing fields Select the apprpriate validity perid Check the apprpriate renewal ptin Check the apprpriate cmpetitive replacement ptin Click Yes r N t whether yu want GeSupprt with the rder Select the apprpriate number f server licenses Enter any special instructins fr the rder (this is ptinal) Cut and paste the Certificate Signing Request (CSR) in the CSR field See web-server instructins fr generating CSR at http://www.getrust.cm/quickssl/csr/index.htm Validate yur CSR infrmatin Enter cntact infrmatin fr a site administratr, technical, and billing cntact Select apprver email address Validate yur entire rder infrmatin Agree t the subscriber agreement Submit rder Apprver Apprves certificate request 3.2.1.2 Apprving a QuickSSL Premium r Pwer Server ID Certificate The apprver selected in the request certificate prcess will receive an email indicating a certificate has been rdered fr abc.dmain.cm by Je Admin. The apprver shuld click n the link prvided within the email t review and apprve the request. Once the inf is reviewed, the apprver can select the I Apprve buttn. The certificate is issued via email t the administratr, technical and billing cntacts listed in the rder. The apprver receives a cnfirmatin screen that the certificate is apprved and shuld be emailed shrtly. 8
3.2.1.3 Installing a QuickSSL Premium and Pwer Server ID Certificate Within a few minutes f an apprved request, the technical cntact will receive an email with installatin instructins. If the email is nt received, within a few minutes, GeTrust Custmer Supprt shuld be cntacted. Installatin instructins fr all the ppular Web servers can als be dwnladed at http://www.getrust.cm/quickssl/install/index.htm. The technical cntact cpies the enclsed certificate frm the end f the mail and installs it n the web-server per the web-server installatin instructins. 3.2.2 True BusinessID, True BusinessID with EV and VeriSign Certificates T rder a True BusinessID, True BusinessID with EV r VeriSign certificate, please fllw the instructins belw. Fr a full descriptin f the prcess, including screen shts, refer t Sectin 5, Ordering Prducts Using GeCenter. 3.2.2.1 Requesting a certificate Lgin t GeCenter at https://prducts.getrust.cm/gecenter using yur User Name and Passwrd Frm the SSL Certificates tab click n Order Certificates Click n Place Order next t True BusinessID Cmplete the fllwing fields Select the apprpriate validity perid Check the apprpriate renewal ptin Check the apprpriate cmpetitive replacement ptin Click Yes r N t whether yu want GeSupprt with the rder * Select the apprpriate number f server licenses Enter any special instructins fr the rder (this is ptinal) Cut and paste the Certificate Signing Request (CSR) in the CSR field See GeTrust web-server instructins fr generating CSR at http://www.getrust.cm/true_businessid/rder/csr.htm See VeriSign web-server instructins fr generating CSR at http://www.verisign.cm/supprt/ssl-certificates-supprt/index.html A Prduct Enrllment frm is displayed. On this frm cmplete the fllwing: Organizatin infrmatin Organizatinal Cntact infrmatin sectin Technical Cntact infrmatin sectin Billing Cntact infrmatin sectin 9
A prduct enrllment summary page is displayed fr final review. Please read the subscriber agreement, check the I Agree checkbx, and click the Submit buttn t submit the rder fr prcessing. The certificate request has nw been successfully submitted and an rder number is displayed n the screen. GeTrust will nw g thrugh the prcess f cnfirming the business identity f the cmpany fr which yu are rdering the certificate by btaining and checking certain business registratin dcuments fr the cmpany. * Applies t GeTrust rders nly 3.2.2.2 Installing a True BusinessID, True BusinessID with EV Within a few minutes f GeTrust apprving the certificate request, the rganizatin, technical, and billing cntacts will receive an email with the certificate and installatin instructins. The technical cntact cpies the enclsed certificate frm the end f the mail and installs it int the web-server per the web-server installatin instructins which can be fund at the links belw: GeTrust Certificates http://www.getrust.cm/true_businessid/rder/install.htm A True Site seal is als included with every rder f True BusinessID and True BusinessID with EV. The fulfillment email will als include instructins fr installing the site seal. VeriSign Certificates http://www.verisign.cm/supprt/ssl-certificates-supprt/index.html Every VeriSign Certificate cmes with a VeriSign Secured Seal. Instructins n hw t install the VeriSign Secured Seal are available at the link belw: http://www.verisign.cm/supprt/ssl-certificates-supprt/secure-site-seal/index.html 3.2.2.2.2 Installing a VeriSign Certificate When the VeriSign Certificate is issued, the rganizatin, technical and billing cntacts will receive an email with the certificate installatin instructins. The technical cntact cpies the enclsed certificate frm the mail and installs it int the webserver per the web-server installatin instructins which can be fund n the supprt site at the link belw: http://www.verisign.cm/supprt/ssl-certificates-supprt/index.html Every VeriSign Certificate cmes with a VeriSign Secured Seal. Instructins n hw t install the VeriSign Secured Seal are available at the link belw: http://www.verisign.cm/supprt/ssl-certificates-supprt/secure-site-seal/index.html 10
Sectin 4 Authenticatin Prcess 4. 1 Extended Validatin Authenticatin This is the highest level f authenticatin available with an SSL Certificate. The CA/Brwser Frum, a cnsrtium f Certificate Authrities and Brwser manufacturers, develped this categry f Web site authenticatin as an industry-wide standard. In rder t be authrized t issue EV SSL Certificates, a CA must pass regular third-party audits cnfirming that it meets the requirements set ut in this standard fr validating the identity f certificate requesters. Mre infrmatin n the CA/Brwser Frum and the EV standard is available at www.cabfrum.rg. GeTrust requires a signed acknwledgement f agreement frm the crprate cntact listed n any rder fr an EV SSL Certificate. A cmpany registratin dcument may als be required if the we are unable t cnfirm the rganizatin s details thrugh a gvernment database. A legal pinin letter may als be requested t cnfirm the fllwing details abut the rganizatin applying fr the Extended Validatin SSL Certificate: Physical address f place f peratin Telephne number Cnfirmatin f exclusive right t use the dmain Additinal cnfirmatin f the rganizatin s existence (if less than 3 years ld), and verificatin f the crprate cntact s emplyment. These are the standard methds f identity verificatin used t validate rganizatins fr EV SSL Certificates, hwever, dcumentatin requirements may vary depending n the infrmatin available n varius apprved nline databases. 4.2 Organizatin Authenticatin This is a high assurance level f authenticatin. SSL Certificates with this level f authenticatin require verificatin f an rganizatin s existence thrugh a gvernment issued business credential. Usually GeTrust will get this independent verificatin by searching ne f many gvernment r private databases t which they have access. If we cannt find prf f right t d business in the stated name fr a certificate requester, we may request a cpy f ne f the fllwing items: Articles f Incrpratin Business License Certificate f Frmatin Ding Business As Registratin f Trade Name Charter Dcuments Partnership Papers 11
Fictitius Name Statement Vendr/Reseller/Merchant License Merchant certificate US Tax Licenses fr nn-prfit rganizatins and sle prprietrships (in either case the state tax dcuments must list the rganizatin as nn-prfit r sle prprietr) 4.3 Dmain Authenticatin GeTrust ffers dmain authenticated SSL Certificates. These lwer assurance certificates are apprpriate fr rganizatins cncerned primarily with encryptin. Dmain authenticated certificates are the lwest frm f authenticatin available. An entity requesting a dmain authenticated certificate will g thrugh a prcess t help verify that they either wn the dmain requested r that they have the right t use that dmain name. Additinally we will verify that the email address fr the cntact requesting the certificate is either listed in the WHOIS directry r meets the CA's predetermined email alias requirements. Once a certificate enrllment has been submitted, the rder will be prcessed in timely manner. 12
Sectin 5: GeCenter GeCenter is the administrative Web prtal essential fr partner management f the GeTrust and VeriSign brand prducts in yur prtfli. In GeCenter yu will be able t manage varius functins, including purchasing and rdering certificates, running reprts, custmizing email messages, and Custmer Supprt infrmatin. Shuld yu require assistance with the issuance f yur custmers certificates, please cntact ur Custmer Supprt team as per the cntact details listed in the Supprt Pages f yur Web prtal. Alternatively yu can cntact yur sales accunt manager fr any prduct r cntract related queries. 5.1 Accessing GeCenter Access GeCenter by ging t the fllwing URL: https://prducts.getrust.cm/gecenter. We recmmend that yu bkmark this link fr future reference. This link can als be accessed thrugh the Partner Lgin n the GeTrust Partner hme page. Upn entering a valid User Name and Passwrd, yu will be presented with the SSL Certificates page. 5.2 SSL Certificates Menu The main prtin f the SSL Certificates menu will describe the majr functins available in this tab. The left hand side f GeCenter hmepage will present detailed links t activities available t rder certificates, establish new cntracts, run reprts n rders, custmize emails, and update accunt infrmatin. Additinally, the name f the user is displayed abve these links, as well as the users email address and cmpany name. Yu can als see the cntact infrmatin fr yur GeTrust Sales Accunt Manager n the left navigatin bar. 13
The SSL Certificates main webpage lks like the fllwing: 5.2.1 Ordering Certificates T place an SSL certificate rder n behalf f yur custmer select the Order Certificates link n the left hand side f GeCenter Hme Page. All the existing Pay as Yu G and Bulk cntracts that are in place fr yur accunt will be displayed. Select Place Order next t the prduct that is being rdered. When placing an rder against a "Pay-As-Yu-G" cntract - the registered credit card will be debited upn rder fulfillment. When placing an rder against a Bulk cntract, ur system will decrement the quantity f certificates, and the remaining funds in yur cntract. Once the limit f either is reached r there is a credit amunt less than the purchase price f a certificate, n additinal certificates can be rdered. Nte that the dllar amunt deducted is equivalent t yur discunted partner purchase price. When viewing yur cntract yu have the ptin t place an rder, view the number f certificates yu have rdered by prduct, view the dllar amunt spent and the dllar balance f yur cntract, and view details fr all rders placed against that particular cntract. 14
15
The QuickStart sectin f this guide gives an verview f the rdering prcess fr each f the GeTrust prducts. 5.2.2 Establish a New Cntract This sectin allws the administratr t purchase new Bulk r Pay-As-Yu-G cntracts thrugh which SSL certificates can be rdered against. These new cntracts will shw up in the Order Certificates Menu after they are apprved. After clicking either ne f the links Purchase a Blck f Certificates r Establish a Pay_As_Yu_G Cntract a purchase frm is displayed that yu must fill ut and submit t GeTrust. Belw are sme screen shts f what these pages lk like: 16
5.2.3 Purchase a Blck f Certificates This ptin is used t purchase additinal blcks f certificates at a discunted partner rate. T purchase additinal blcks f GeTrust r VeriSign certificates, select the prduct and quantity t purchase and fill ut the nline enrllment frm. When paying via credit card, GeTrust will immediately credit yur accunt with the additinal prducts and make them available fr resale. When paying via Purchase Order, please cntact yur Sales Accunt Manager immediately upn submitting the rder t arrange the apprval f the cntract. 5.2.3.1 Bulk Purchase Screen Sht 17
5.2.4 Establish a Pay-As-Yu-G Cntract This ptin is used t create a new Pay-As-Yu-G cntract r renew an existing cntract with the latest GeTrust and VeriSign partner pricing. If yu have an existing Pay-As-Yu- G cntract n file, yur lder Pay-As-Yu-G cntracts will be expired s yu will nly have ne Pay-As-Yu-G cntract active. If yu are mving frm a Bulk cntract t a Pay-As-Yu-G cntract yu must update yur credit card and billing infrmatin in GeCenter. 5.2.4.1 Pay-As-Yu-G Screen Sht 18
5.3.1 Reprts This sectin allws the certificate administratr t run a variety f reprts n all SSL certificates rdered thrugh yur accunt. There are three different types f reprts; Summary, Detailed, and Renewal. All reprts can be exprted in XML, Excel, r CSV frmats. 5.3.1.1 Summary Reprts Prvide summary data fr all selected rders, including rdered and cmpleted dates, current status, dmain prduct type (QuickSSL Premium, Pwer Server ID, Pwer Server ID Wildcard, True BusinessID, True BusinessID Wildcard, True BusinessID with EV, VeriSign Secure Site, VeriSign Secure Site Pr, VeriSign Secure Site with EV and VeriSign Secure Site Pr with EV), and price. Yu can search fr rders by prduct, by status r by rder date range. 19
20
5.3.1.2 Detailed Reprts Prvide detailed infrmatin fr selected rders, including full rder infrmatin and certificate details. Yu can search n rders by prduct, by status r by rder date range. 21
5.3.1.3 Renewal Reprts Prvides a list f rders that will be expiring in a selected timeframe, and lets yu see the certificate validity dates, renewal status, and dmain names issued frm. 22
5.4.1 Custmize Emails This menu allws the administratr t custmize the email messages that are sent t custmers fr certificate enrllment and delivery. On a prduct level partners can custmize the subject line and text area fr all emails autmatically sent ut by ur system t their custmers. There is als an ptin t enable and disable individual emails sent ut by ur system. 23
T custmize an email message, click the View/Edit buttn next t the message yu want t edit, type in yur changes t the subject and message area, and then click the Update buttn. The message will then be updated with the text that yu want. 5.4.2 Multiple Language Optins Additinally, yu can custmize yur emails t g ut in mre than 15 different languages. Yu can d this by selecting the language and prper encding fr the emails, and then custmize the emails fllwing the steps abve. Yu will need t supply the text in the language yu select, all the default text supplied by ur system is in English. 24
25
5.5.1 Accunt In GeCenter yu can edit the accunt infrmatin listed under the sub headings belw: 5.5.1.1 Update Credit Card Infrmatin This page allws yu t view r make changes t yur credit card that GeTrust has n file fr yur partner accunt. This credit card is used fr Pay-As-Yu-G rders and fr bulk purchases. 5.5.1.2 Update Billing Cntact This page allws yu t view r make changes t yur billing cntact infrmatin that GeTrust has n file fr yur partner accunt. This billing cntact is used fr Pay-As-Yu- G rders and fr bulk purchases. 5.5.1.3 Change Passwrd This page allws yu t change yur passwrd. If yu have a passwrd fr accunt access, yu shuld peridically change it. This is nt applicable fr all certificate enabled administratrs. 26
5.6.1 Supprt 5.6.1.1 24 x 7 Online Self-Help Supprt Fr 24 x 7 SSL supprt including CSR generatin, certificate and site seal installatin instructins and access t ur self-service supprt knwledge base, please visit ur supprt pages at http://www.getrust.cm/supprt/index.asp 5.6.1.2 Custmer Supprt Custmer Supprt prvides custmers with assistance n rder status, dcumentatin and rder related queries. Custmer Supprt shall help ensure that all the required authenticatin steps are prperly cmpleted befre a certificate is issued. 5.6.1.3 Technical Supprt Technical Supprt prvides custmers with assistance with key generatin, certificate installatin, reissues, trubleshting and related technical queries. 5.6.1.4 API Supprt API Supprt prvides custmers with assistance n the implementatin, testing, and trubleshting f partner APIs. We als ffer a fully functinal test envirnment t help yu integrate int ur API. Please cntact yur accunt manager fr assistance. 5.6.2 Cntacting Supprt Please visit ur supprt pages belw fr details n hw t access ur 24 x 7 Online Self- Help and different supprt departments. http://www.getrust.cm/partnersupprt/wrldwide/partnersupprt.html 5.6.2 Adding / Deleting Administratrs 5.6.2.1 T add a new administratr t a GeTrust Partner Accunt, an existing administratr must submit a frmal request t GeTrust n a cmpany letterhead. The fllwing details shuld be included in the request, the new administratr s first and last names, email address, phne number, preferred user name, and preferred passwrd. The current administratr must als print his / her first and last names, email address, and include his / her title and signature. If the current administratr is n lnger with the rganizatin, a C-level emplyee (CEO, CTO, CIO etc.) must submit the request. The authrizatin letter shuld be faxed t ur custmer supprt grup as per the supprt cntact details within GeCenter, clearly marked with Additinal Admin Request fr COMPANY NAME HERE n the cver letter. 27
5.6.2.2 T remve an existing administratr frm a GeTrust Partner Accunt, an existing administratr must submit a frmal request t GeTrust Supprt n a cmpany letterhead. If the current administratr is n lnger with the rganizatin, a C-level emplyee (CEO, CTO, CIO etc.) must submit the request. They must prvide the administratr's first and last names, title, email address, and phne number. Then, the current administratr must sign his/her name, print his / her first and last names, and include his / her title. The authrizatin letter shuld be faxed t ur custmer supprt grup as per the supprt cntact details within GeCenter, clearly marked with "Admin Remval Request fr COMPANY NAME HERE" n the cver letter. 5.6.3.1 Re-Issue Plicy GeTrust nw ffers self-service re-issues free f charge fr the life span f all GeTrust certificates. VeriSign ffers self-service re-issues free f charge fr the first 30 days f a VeriSign certificate after which a $100 replacement fee is charged. T qualify fr a certificate reissue, all existing cre certificate details must remain the same (apart frm the fully qualified dmain name). T re-issue a certificate generate a new Certificate Signing Request (CSR) n yur web server and click the link belw: https://prducts.getrust.cm/gecenter/reissuance/reissue.d Select Redeem fr the certificate yu want t get re-issued One Time Reissue if utside the 30 day windw Submit reissue request An email will be sent t the email address used in the authenticatin The persn receiving the email must fllw a link t: Enter a new CSR Agree t the subscriber agreement Submit the rder Additinally reissues may be autmatically submitted using the API. Ask yur Sales Accunt Manager fr mre details n the API. The new certificate will then be emailed t the certificate cntacts and will cntain the same expiratin date as the riginal certificate. 28
5.6.4 Cancellatin/Refund Plicy A GeTrust certificate can be cancelled within 7 days f issuance fr that certificate and the funds will be placed back int yur accunt. A VeriSign Certificate can be cancelled within 30 days f issuance fr that certificate and the funds will be placed back int yur accunt. Cntact ur Custmer Supprt Team t cancel a certificate rder n this end yu can then wrk with yur custmer directly t cancel the certificate rder n their end. GeTrust r VeriSign will credit yur accunt with the dllar amunt yu were charged fr the certificate and nt the amunt yu charged yur custmer. 29
5.6.5 Revcatin Plicy Certificates can nly be revked when the key pair has been cmprised and can nly be dne by an administratr assigned t the rganizatin s accunt. T revke a certificate yu must email ur Custmer Supprt team thrugh ur rapid respnse center and in the subject line yu must state: Enterprise SSL Request fr Revcatin Organizatin Name Here. Yu will then need t explain hw the key pair was cmprmised. Our Custmer Supprt team will then review the request t cnfirm it is legitimate and take the apprpriate steps t revke the certificate accrding t ur WebTrust practices. Nte: Revcatins are rare and are nt the same thing as a cancellatin. 2007 GeTrust, Inc. All rights reserved. GeTrust, the GeTrust lg, the GeTrust design, QuickSSL, and ther trademarks, service marks, and designs are registered r unregistered trademarks f GeTrust, Inc. and its subsidiaries and affiliates in the United States and in freign cuntries. VeriSign is a trademark f VeriSign, Inc and its subsidiaries and affiliates in the United States and in freign cuntries. All ther trademarks are prperty f their respective wners. 30