...
Full admin guides (including API documents) can be found at: https://support.sectigo.com/Com_KnowledgeProductPage?c=Admin_Guides&k=&lang=
Details on S/MIME Validation can be found in the attached slideset.
Q: Where can the Sectigo certificate chains be found?
...
It is currently possible to order Document Signing Certificates on a preconfigured USB token from Sectigo. More information on this process is available in this GUIDE.
Q: Are eIDAs Certificates available via Sectigo?
eIDAS certificates These can be ordered viahere: https://www.sectigo.com/ssl-certificates-tls/eidasdocument-signing-certificates-for-citizens. There is a charge for these certificates.
...
. Participants can use the following discount code which will only charge you for the token and not the certificate itself: QQY1XB49V9.
Q: Are eIDAs Certificates available via Sectigo?
eIDAS certificates can be ordered via: https://sectigo.com/ssl-certificates-tls/eidas-signing-certificates-for-citizens. There is a charge for these certificates.
Q: How Do I Order OV Code Signing Certificates?
Code Signing Certificates can be ordered directly from cert manager. From From 8th May 2023 it will only be possible to order code signing certificates that comply with specific HSM standards OR that are supplied directly on a token by Sectigo. More information is available here: https://sectigo.com/knowledge-base/detail/Changes-to-Sectigo-Code-Signing-Offerings/kA03l000000BoIs. Currently supported devices are:
...
If you have a specific device you want to use that is not currently supported, please let the TCS Service Owner know and we can raise with Sectigo. We STRONGLY recommend that you purchase your own device rather than ordering one from Sectigo as the delivery times cannot be guaranteed and you may be charged additional international shipping / customs charges which are outside of our control.
More information about using your own Yubikey to order a certificate can be found at: https://www.sectigo.com/knowledge-base/detail/Key-Generation-and-Attestation-with-YubiKey/kA03l000000roEV.
To order an OV Code Signing certificate on a device configured by Sectigo please order at https://www.sectigo.com/ssl-certificates-tls/code-signing and use discount code 2GE8AFN0T1.
To order an OV Code Signing certificate on your own device, please order via Cert Manager.
Q: How Do I Order EV Code Signing Certificates?
Similarly to document signing certificates, EV Code Signing Certificates need to be provided on a preconfigured USB token from Sectigo. More information on this process is available in this GUIDE.to be provided on a preconfigured USB token from Sectigo. These can be ordered here: https://www.sectigo.com/ssl-certificates-tls/code-signing using discount code: 3GE5YPN6T8.
Q: How do I create an EV Anchor?
...
Yes, due to slight differences in the industry requirements the set of 'authentic information sources' that Sectigo has to use for organisation validation is different. Whereas for SSL validation an independent information source may be used, for S/MIME only government agency sources and Legal Entity Identifier (LEI) data references are allowed. This means Sectigo has to do re-validation. This is not triggered automatically - it needs to be requested by an MRAO. We strongly recommend that you DO NOT SELECT TO REVALIDATE AN ORGANISATION as this will block the ability to issue SSL certificates as well. Instead, choose to edit an organisation and enter an organisational identifier in the new relevant field...this is typically a VAT number or equivalent. If you do not have this, enter FIXME in the field and the validation team will attempt to find the correct number.
Q: is GÉANT looking at the impact of the changing / volatile certificate market?
Yes, we have prepared a briefing paper for NRENs and will be undertaking a series of information gathering and discussion workshops in 2024.