How to Sign into the InCommon/CERTInext Certificate Manager - Article - Signing Into CERTInext (InC...
Instructions
Requesting a New SSL Certificate
- Click New Certificate.
- Select the appropriate Group/Department.
- For Certificate Type, select TLS/SSL Certificates.
- Select the Certificate Authority source. Our current Certificate Authority is SSL.com.
Choosing a Certificate Type
Before selecting a product, determine whether your service should use a DV or OV certificate. (OV certificates are expected to be available for SSL.com in the near future. Currently, DV is the only option available for SSL.com)
Use a DV certificate for most services, including:
- Departmental applications
- College or research systems
- Services used by a specific group of users
- Internal applications that are not broadly used across Purdue
Use an OV certificate for university-wide services that represent Purdue or are broadly used across campus, such as:
- www.purdue.edu
- FileLocker
- Purdue Directory (PED)
- Purdue Person Search
- LISTSERV and other shared campus services
Services used only by Purdue IT staff may use either DV or OV certificates. In these cases, DV is typically sufficient, but OV is also acceptable.
Rule of thumb: Focus on who uses the service, not who manages it. If the service is a shared Purdue resource that anyone at Purdue might reasonably use, choose OV. If the service is intended for a specific department, college, research group, application audience, or internal team, choose DV. For Purdue IT-only services, either certificate type is acceptable.
Select a Product
Choose the appropriate certificate template. The most common are:
- SSL.com DV SSL (for certificates with no Subject Alternative Names)
- SSL.com DV SSL UCC (for certificates with SAN/multi-domain)
- SSL.com DV SSL Wildcard UCC (for certificates with wildcards and SANs (*.domain))
- SSL.com DV SSL Wildcard (for certificates with wildcards (*.domain))
For details about certificate profiles, see CertiNext General Products/Profiles - Certificate Service - Internet2 Wiki.
Submit the Request
- Click Next.
- Upload or paste your CSR. If you do not have a CSR, click Skip CSR.
- Select Purdue University and click Next.
- Under Certificate Download Delegation, IAMO recommends using a group email address. Click Next.
- Review:
- Common Name (FQDN)
- Subject Alternative Names (SANs), if applicable
- Under Additional Information, add any additional email addresses or supporting documentation. IAMO recommends using group email addresses whenever possible.
- Submit the request.
- Once approved and issued, download the certificate and install it on the server.
Domain Validation
If the domain has not previously been validated in CERTInext, email accounts@purdue.edu to request domain validation.
If the domain is managed by a third party or vendor, you will need to work with them to add the required validation records.
Before You Start
Make sure you have:
- A generated CSR from the target server.
- Permission to request certificates for the domain.
- Access to complete DCV if required.