Vista & Internet Explorer 7 Users
ObjectSign Certificate using Vista & Internet Explorer 7
When you begin the ordering process you will see the following page. Due to the added security Microsoft has introduced to Vista you need to make sure all these steps are complete before applying for your ObjectSign certificate. Missing even one step can cause an error at the final stage of installting the certificate, which will result in the entire process needing to be restarted.
Before you start please make the following changes, the changes are outlined on the above screenshot, but provided below for your convenience;
- Open Internet Explorer
- Go to 'Tools'
- select 'Internet Options'
- select the 'Security' tab
- highlight 'Trusted sites' and select 'Sites'
...and add the following website names in 'Trusted sites';
- https://www.globalsign.net
- http://www.globalsign.net
- https://secure.globalsign.net (Note:You will not see this URL in the above screenshot, but is however a necessary item)
- http://secure.globalsign.net
Please install the GlobalSign Root CA http://secure.globalsign.net/cacert/Root.crt into the Trusted Root Certificate Authorities folder in your browser before beginning the order process. Please be sure to select the Show physical stores tick box, and then place the certificate in the Local Computer folder in the Trusted Root Certificate Authorities directory
When you click the link above you will be prompted to install the certificate and then this dialog box will appear on the left, this is the GlobalSign Root CA certificate.
Click install and you'll be asked where to install the certificate. Choose 'Place all certificates in the following store' and Browse
After you select Browse the box to the left will appear, select the 'Show physical stores' tick box and select 'Trusted Root Certification Authorities', then 'Local Computer' and OK. when the certificate has been installed the wizard will display a box to tell you the certificate was successfully installed
Then close Internet Explorer and restart so the changes can take affect
Once you have restarted Internet Explorer 7 you need to reopen Internet Options, click on the security tab then click "Custom Level".
This will then open a box called "Security Settings - trusted Sites Zone".
You need to scroll down to "Active X controls and plug-ins" and change the following default settings.
- Allow previously unused ActiveX controls to run without prompt: set to Enable
- Allow Scriptlets: set to Enable
- Automatic prompting for ActiveX controls: set to Disable
- Binary and Script behaviours: set to Enable
- Display video and animation on a webpage that does not use external media player: set to Disable
- Download Signed ActiveX controls: set to Prompt
- Download unsigned ActiveX controls: set to Prompt
- Initialize and script ActiveX controls not marked as safe for scripting: Prompt
- Run ActiveX controls and plugins set to Enable
- Script ActiveX controls marked safe for scripting: set to Enable
- Click Ok
- Click Apply
- Close and re-open IE7
Once you have received the certificate and it is installed within Internet Explorer you can default your security settings for Internet Explorer within the Internet Options by clicking on the “Default level”. This can only be done AFTER you have installed your certificate.
You can now begin the ordering process
On the first step you might see a yellow pop up bar asking to install the following add-on! Please make sure you accept this and it is installed.
When you complete step 1 the web browser will create a CSR on your behalf. You must click yes to the pop up box that appears
Make sure you print out the order details before continuing. You will not be able to go back to this page after you click “Create Request” so make sure you have a copy that has successfully been printed before continuing.
Please sign your printed order form and fax back using the phone number listed.
Select the number nearest to your location.
You can also PDF the document via e-mail to vetting@globalsign.com
When you receive the e-mail click the link to open the web page to install the certificate. Click on the “Install” button.
Click “yes” on the ActiveX box, then another box will appear.
Click “Yes” to allow the web site to add the certificate to your computer”.
Once this box appears, the ordering process and installation is all complete. You can now look in your Certificate store to view your certificate.
