GlobalSign Support Centre
Top Support Topics
Current Topics
Verify your SSL with our Health Checker Tool
When you have installed your SSL Certificate on your server go to our Health Checker Tool to make sure it is working correctly.
New Intermediate Certificates ***IMPORTANT NEWS***
From June 26th 2011, GlobalSign is now using new intermediate certificates. All new orders after this date will need to install our new intermediates.
Please be aware that if you reissue your certificate after this date from an existing order that was issued before June 26th 2011 you will also need to install the new intermediate certificate.
Any questions please do not hesitate to contact us.
New Ordering Guides for non-SSL Certificates
GlobalSign has now moved Code Signing, PersonalSign and PDF Signing to
the GCC platform - giving customers a single unified platform for ordering
all types of Digital Certificate. The latest ordering guides are available
here:
How to order Code Signing Certificates
How to order PersonalSign Digital IDs
How to order PDF Signing for Adobe PDF
ePKI Administrator Guide
Malware Monitoring
Read about Hackalert, our Malware Monitoring tool.
Minimum 2048 bit key length
All orders placed from November 29th 2010 will only be accepted with a CSR key length of 2048 bits or higher.
Ordering PersonalSign 3 Pro Certificate
Please go to our dedicated page to help you further with ordering and installing your PS3 PRO Certificate.
PersonalSign - Ordered in FireFox, using Outlook as Mail Client
If you ordered a PersonalSign Certificate through FireFox, but need to use it in Outlook, please click the link for instructions on exporting and importing the certificate.
Ordered in Firefox, Configuring Outlook
PersonalSign Certificate for the U.S. Food and Drug Administration
If you ordered a PersonalSign Certificate for use with FDA and need assistance with installing and setting your certificate, please download our PDF guide.
Order & Install PersonalSign for FDA
ObjectSign for Individuals
We now allow Code Signing (ObjectSign) Certificates for Individuals as well as Organizations. For more information on this please click below to view our FAQ page.
Intermediate SSL Certificates for F5 Network Servers
If you are using an F5 Server please use the intermediate certificates listed below when installing your SSL Certificate to avoid any issues.
DomainSSL - use Intermediate for MS Exchange and OCS 2007/2010.
MS Exchange/OCS 2007/2010 Domain SSL Intermediate Certificate
OrganizationSSL - use Intermediate for MS Exchange and OCS 2007/2010.
MS Exchange/OCS 2007/2010 Organization SSL Intermediate Certificate
For ExtendedSSL Certificates please contact support by selecting the option "Submit Support Ticket" at the top right of this page.
AutoCSR Certificate Retrieval
Customers who chose to use AutoCSR to generate their cerificate request can retrieve their certificate using the following procedure.
Auto CSR Certificate Retrieval
How to Release-Sign a Driver Package
When Signing a Kernel Driver to run on Vista 64 bit and Windows 7 the following link will help undertand the processes involved.
How to Release-Sign a Driver Package
This link will take you to the MSDN - Microsoft Developer Center
Generate a CSR with a Key Length of 2048 bits
If your CSR is not accepted when enrolling for an SSL Certificate it might be because the CSR you have generated uses a Key Length of less than 2048, GlobalSign recommends you generate CSR's with key length of at least 2048 bits.
Renewing your SSL with Internet Information Services (IIS 5 & 6)
If you are having trouble renewing your SSL certificate and you use IIS as your web server, it could well be because you have chosen the 'Renew current certificates' option within IIS. As you may have discovered, this does not create the correct details in your CSR.
Renewing SSL Certificate with IIS
SSL Customers who have lost their Private Key can request a Reissue
If you've lost your Private Key and cannot install your SSL certificate, have no fear. Log into your Global Certificate Centre (GCC) account and select "Certificate History" from the left-hand side.
Reissue SSL Certificate from GCC.
Multiple SANs entries may break ISA Server Web Publishing
The ISA Server 2004 Acceleration server DOES NOT support the Subject Alternative Names (SANs) attribute in SSL certificates. However, ISA Server 2006 will function correctly as long as you have ISA Service Pack 1 installed.
If ISA Service Pack 1 is not installed the client may receive the
"Error Code 500 Internal Server Error" error message when they
try to visit a web page that you have published using ISA Server 2006.
For more info please visit
http://technet.microsoft.com/en-gb/library/cc302619.aspx
Code Signing, PersonalSign or PDF Signing with Vista and IE7?
If you are using Vista and Internet Explorer 7 to request a Code Signing certificate or a PersonalSign certificate you MUST make several amendments to the security settings in your Browsers options due to the extra security settings in Windows Vista.
Browser Settings for Certificate Request with IE7 and Vista
Legacy Secure Server CA (ServerSign) Expiration/Upgrade
GlobalSign Primary Secure Server CA certificate will expire on January 28th 2009.
Some customers using GlobalSign ServerSign certificates will have to update the certificate chain on their webservers to avoid trust problems if they have not already done so.
Microsoft Exchange 2007/2010
Microsoft's popular mail server, Exchange 2007/2010 requires SSL with Subject Alternative Names (SANs) to enable a secure external connection to Outlook Web Accesss (OWA).
Read About Exchange 2007/2010 CSR Generation and SSL Installation
Top Tips
-
When you have installed your SSL Certificate on your server go to our Health Checker Tool to make sure it is working correctly.
- Renewing in IIS
- Install ActiveX
- Firefox Master password
- Securing both the www. version and non-www. version of your domain name?
- Please do not use special characters in your certificate application
- Create a back up of your certificate and its private key
Your FREE SSL installation healthcheck
Each GlobalSign customer receives a FREE SSL installation healthcheck. This service includes the following checks carried out by our automated systems and expert technical staff. The healthcheck will take place after your certificate has been issued or at a time convenient for you. Just contact our support staff with your requirements
- Server Availability - can the popular browsers connect to your site over SSL?
- SSL Certificate Installation - is your SSL Certificate installed and configured correctly?
- Common Error Checking - do you have any common errors when connecting over SSL?
- Site Seal Installation - are you maximizing customer conversions on your web site by correctly using the GlobalSign site seal?

