Page Comparison

How to request an SSL certificate

Geotrust SSL certificates

To begin the process of requesting a Geotrust SSL certificate (new or renewal):

• If the server is not a UIT host, send an IDR to Phyllis Grant in TAB, Suite 211, that covers the cost of the certificates you'd like to purchase. If the service is run by UIT, no IDR is required.
• Geotrust certificate prices are as follows per machine, not per certified web site name:
  • e.g. if you want to run the same web site on two load balanced machines, the price is twice the cost shown here

    Certificate Duration	Price Per Certificate Per Machine
    1 year	$85.00
    2 years	$149.00
    3 years	$212.00
    4 years	$276.00

Geotrust SSL certificates

1. Generate a Certificate Signing Request

   Info
   Please note that Geotrust is requiring that all CSRs be generated with a minimum of 2048 bits.

2. Send email to cert-admin@tufts.edu including:
   1. The service name that you want to have certified. Note that this often is different from the actual machine name(s).
      • For example: certificate / service name docs.uit.tufts.edu --> actual machine prod-docs-01.uit.tufts.edu
   2. How many years the certificate is for.
   3. How many machines the certificate is for (e.g. load balanced servers all sharing the same certificate) and the names of those machines.
   4. A contact name, telephone number, and email address for the group administering the server.
   5. The CSR generated in step 2 above. For best results, include the CSR as a text file attachment to the email, but just pasting the CSR text into an email will usually work.
3. After you submit the ticket and the IDR (for Geotrust certificates) has been processed and received by the ESS, the ESS will submit your CSR to the GeoTrust Certification Authority and approve it for signing. Once this process is completed your SSL certificate will be added to your ticket, and you'll receive a followup communication from the ESS.
4. Once you verify that the certificate is valid, please update the TechConnect ticket (by replying to the ticket auto-response email you received when submitting your request or any subsequent correspondence) indicating as much.
5. Once you have installed your Geotrust SSL Certificate, you can verify that the installation was successful by using the SSL Certificate Installation Checker

If you have any questions, please email cert-admin@tufts.edu.This content has been moved to /wiki/spaces/EnterpriseSystems/pages/89464035