You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Under Account, you will find the following topics

  • In My Division shows how SURFnet instituted your data. The request is for the descriptive text is not wijzigen.De Division on the legal entity (for example, the Catholic University of Brabant); Organization name (for example, Tilburg University) is discussed under Validation. If you are a good and not too large logo has, then upload that in My Division.

  • Without consulting scs-ra@surfnet.nl Please do not make use of

    • Guest URLs that anyone can apply for such URL burnt out certificates to administrators; this is very risky

    • API keys that are required only if you are outside the portal to want to program.

  • Under Authentication Settings can be adjusted 2 Factor Authentication settings (2FA). Personal client certificates and One Time Passwords a la Google Authenticator is available. The functionality was added in February 2015. In early March it does not work for non-administrator users. For admins works such as Google Authenticator and specially created DigiCert personal certificates. Advice is to turn 2FA per person, not for the division once, let alone for the whole account. You do not inadvertently exclude all admins at once if you make a mistake ...

  • In " Users "can someone administrator for other people is to create an account; they receive from DigiCert a mail which they set their own password and such data.

  • All administrator accounts can approve or reject certificate requests. User accounts can only submit requests. The private administrators (not that SURFnet) receive an email alert and able to handle the request.

  • If the fields Phone (phone number) and Title (function name) both are completed then such a user can be nominated by DigiCert (validated) for the treatment of Extended Validation SSL certificates. The procedure requires a phone call from DigiCert Validation from Utah. That goes to your formal number (usually the telephone exchange) and can go from there along HRM / Personnel: "do you have an employee named van der Harst who works as a Product Manager?" Make sure that the function name is correct. Give someone an administrator account only if it is a trusted expert. Give as few people as possible EV admin rights. Penetrating the legal requirement that everyone click-through 'TCS Terms of Use' has thoroughly read. You do not want to fight American organizations in a liability end up.

  • The nomination of an EV Administrator done from the main menu 
    Validation → Organizations → Manage → Submit for Validation.

  • No labels