GlobalSign Support Centre

Current Topics

Verify your SSL with our Health Checker Tool

When you have installed your SSL Certificate on your server go to our Health Checker Tool to make sure it is working correctly.

SSL Health Check


New Intermediate Certificates ***IMPORTANT NEWS***

From June 26th 2011, GlobalSign is now using new intermediate certificates. All new orders after this date will need to install our new intermediates.

Please be aware that if you reissue your certificate after this date from an existing order that was issued before June 26th 2011 you will also need to install the new intermediate certificate.

Any questions please do not hesitate to contact us.

SSL Intermediates


New Ordering Guides for non-SSL Certificates

GlobalSign has now moved Code Signing, PersonalSign and PDF Signing to the GCC platform - giving customers a single unified platform for ordering all types of Digital Certificate. The latest ordering guides are available here:

How to order Code Signing Certificates
How to order PersonalSign Digital IDs
How to order PDF Signing for Adobe PDF
ePKI Administrator Guide


Malware Monitoring

Read about Hackalert, our Malware Monitoring tool.

What is Malware Monitoring


Minimum 2048 bit key length

All orders placed from November 29th 2010 will only be accepted with a CSR key length of 2048 bits or higher.

Minimum CSR Key Length - FAQ.


Ordering PersonalSign 3 Pro Certificate

Please go to our dedicated page to help you further with ordering and installing your PS3 PRO Certificate.

Order & Install PersonalSign3


PersonalSign - Ordered in FireFox, using Outlook as Mail Client

If you ordered a PersonalSign Certificate through FireFox, but need to use it in Outlook, please click the link for instructions on exporting and importing the certificate.

Ordered in Firefox, Configuring Outlook


PersonalSign Certificate for the U.S. Food and Drug Administration

If you ordered a PersonalSign Certificate for use with FDA and need assistance with installing and setting your certificate, please download our PDF guide.

Order & Install PersonalSign for FDA


ObjectSign for Individuals

We now allow Code Signing (ObjectSign) Certificates for Individuals as well as Organizations. For more information on this please click below to view our FAQ page.

Code Signing FAQ


Intermediate SSL Certificates for F5 Network Servers

If you are using an F5 Server please use the intermediate certificates listed below when installing your SSL Certificate to avoid any issues.

DomainSSL - use Intermediate for MS Exchange and OCS 2007/2010.

MS Exchange/OCS 2007/2010 Domain SSL Intermediate Certificate

OrganizationSSL - use Intermediate for MS Exchange and OCS 2007/2010.

MS Exchange/OCS 2007/2010 Organization SSL Intermediate Certificate

For ExtendedSSL Certificates please contact support by selecting the option "Submit Support Ticket" at the top right of this page.


AutoCSR Certificate Retrieval

Customers who chose to use AutoCSR to generate their cerificate request can retrieve their certificate using the following procedure.

Auto CSR Certificate Retrieval


How to Release-Sign a Driver Package

When Signing a Kernel Driver to run on Vista 64 bit and Windows 7 the following link will help undertand the processes involved.

How to Release-Sign a Driver Package

This link will take you to the MSDN - Microsoft Developer Center


Generate a CSR with a Key Length of 2048 bits

If your CSR is not accepted when enrolling for an SSL Certificate it might be because the CSR you have generated uses a Key Length of less than 2048, GlobalSign recommends you generate CSR's with key length of at least 2048 bits.

Generate a 2048 bit CSR


Renewing your SSL with Internet Information Services (IIS 5 & 6)

If you are having trouble renewing your SSL certificate and you use IIS as your web server, it could well be because you have chosen the 'Renew current certificates' option within IIS. As you may have discovered, this does not create the correct details in your CSR.

Renewing SSL Certificate with IIS


SSL Customers who have lost their Private Key can request a Reissue

If you've lost your Private Key and cannot install your SSL certificate, have no fear. Log into your Global Certificate Centre (GCC) account and select "Certificate History" from the left-hand side.

Reissue SSL Certificate from GCC.


Multiple SANs entries may break ISA Server Web Publishing

The ISA Server 2004 Acceleration server DOES NOT support the Subject Alternative Names (SANs) attribute in SSL certificates. However, ISA Server 2006 will function correctly as long as you have ISA Service Pack 1 installed.

Download ISA Service Pack 1

If ISA Service Pack 1 is not installed the client may receive the "Error Code 500 Internal Server Error" error message when they try to visit a web page that you have published using ISA Server 2006.

For more info please visit

http://technet.microsoft.com/en-gb/library/cc302619.aspx


Code Signing, PersonalSign or PDF Signing with Vista and IE7?

If you are using Vista and Internet Explorer 7 to request a Code Signing certificate or a PersonalSign certificate you MUST make several amendments to the security settings in your Browsers options due to the extra security settings in Windows Vista.

Browser Settings for Certificate Request with IE7 and Vista


Legacy Secure Server CA (ServerSign) Expiration/Upgrade

GlobalSign Primary Secure Server CA certificate will expire on January 28th 2009.

Some customers using GlobalSign ServerSign certificates will have to update the certificate chain on their webservers to avoid trust problems if they have not already done so.


Microsoft Exchange 2007/2010

Microsoft's popular mail server, Exchange 2007/2010 requires SSL with Subject Alternative Names (SANs) to enable a secure external connection to Outlook Web Accesss (OWA).

Read About Exchange 2007/2010 CSR Generation and SSL Installation


Your FREE SSL installation healthcheck

Each GlobalSign customer receives a FREE SSL installation healthcheck. This service includes the following checks carried out by our automated systems and expert technical staff. The healthcheck will take place after your certificate has been issued or at a time convenient for you. Just contact our support staff with your requirements

  • Server Availability - can the popular browsers connect to your site over SSL?
  • SSL Certificate Installation - is your SSL Certificate installed and configured correctly?
  • Common Error Checking - do you have any common errors when connecting over SSL?
  • Site Seal Installation - are you maximizing customer conversions on your web site by correctly using the GlobalSign site seal?