Versions Compared

Old Version 5

changes.mady.by.user Dean Woodbeck (internet2.edu)

Saved on

compared with

New Version 6

changes.mady.by.user Paul Caskey (internet2.edu)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Be sure to list all domains for which you intend to request EV certificates in both the Legal Opinion and the EV Certificate Request Form. Listing the parent domain will cover all sub-domains. For example, listing foo.edu is sufficient to cover web1.foo.edu, web2.foo.edu, etc.

Requesting an EV Anchor

Image Modified

Image Modified

An anchor certificate will pre-validate domains for future EV certificate requests. All domains that require an EV certificate should be included in this request.  If a domain is not listed in this request, you can still request an EV certificate; however, there the order will need to be processed manually by a validatior.

There is no prerequisite to create an EV anchor certificate yet we suggest every organization follow the following steps. Please note there is only one EV anchor certificate that can be applied to each organization (school).  This procedure does not change current certificate ordering process - it is simply to help make EV processing more efficient.  The EV Anchor is NOT an actual certificate that can be used.



The older instructions below have been deprecated in favor of the attached document: EV anchor and SCM v3.pdf




  1. Login to CCM Dashboard
  2. Navigate to the Certificates Tab
    Image Modified
  3. Click the Add button to Add a new Certificate request
    Image Modified
  4. Select the Option “Manual Creation of CSR” and proceed to upload or Copy / Paste CSR.
    Image Modified
  5. Proceed to the next step
    Image Modified
    • Choose the Organization
    • Choose the certificate Type – EV Anchor Certificate
    • Choose Term Length 1 Year
    • Enter the Common Name (this can be any domain you need an EV cert for)
    • In the SAN list enter all domains that you will need The EV Anchor to secure.
    • Server Software does not matter in this case

      Note regarding domains      : Please DO NOT include sub-domains in this certificate unless you are only authorized to order EV certificates for a particular sub-domain.  The requirements for EV Enterprise RA laid out by the CA/B Forum allow unfettered issuance only of certificates at 3rd and higher domain levels from a fully validated, active EV SSL certificate.  For example: Including example.com will allow you to obtain EV certs for sub1.example.com, sub2.example.com or sub1.sub2.sub3.example.com, BUT including www.example.com will only allow sub1.www.example.com, etc. Do not include any wildcards, only root domains.

6. Continue to Enter your Incorporation, Registration Details and Contract signer Details

 Image Modified


 7. The option for auto-renewal is optional and can be edited in the certificate details later on.

 8. Proceed to Subscriber and Certification agreement and select “I agree” checkbox
Image Modified


Once the request is submitted, you must have another MRAO Admin approve the request to finalize it. Once the request is approved, you will receive the order number.

To find the order number in CCM Dashboard, go to Certificates > SSL Certificates > Filter option to locate the certificate applied for by the common name > select Details.

Under certificate details you will see the order number.

Image Modified

 


Submit a ticket to Comodo ccmvalidation@comodo.com and request an EV anchor certificate be set for your account and provide the order number. Please note the validation team may contact you with a request for additional information to verify ownership and company identity. Turnaround time for this request is dependent upon completion of this paperwork.

The EV anchor will be valid for approximately 13 months. DCV expiration notifications will be sent out for this certificate just like any other certificate from CCM. The certificate can be renewed in CCM or another certificate ordered. However, the validation team is to be contacted with the new order number (a renewal will generate a new order number) and request to make it an anchor certificate.

Please Note:

The primary organizational details will be set to match the details validated in the anchor cert order.  IF those details are changed it will require a new anchor certificate to be created and then validated.

*The departments under the primary organization will NOT be allowed to have different details except for the Department Name. The street address, city, state, postal code, and country will become uneditable.

For additional questions/concerns, please contact validation which can be reached Monday thru Friday 7 AM to 5 PM at 888-256-2608 Option #2. (Option #3 will bring you to technical support for CCM process/procedure questions).