Note that this is for locally hosted applications NOT USING the F5 interface. Think of F5 as DHCP but for security certificates, which is the preference if we can.
Requesting A Certificate
- Generate a Certificate Signing Request (CSR) on the server using the HSIT Certificate Builder app.
- Visit the Sectigo Enrollment Page
- Enter the email address svc-ssladmin@pitt.edu - this is a SSL Admin Distribution list. No private accounts for business continuity purposes.
- Enter the access code: UPitt
- Click the green Enroll Certificate button at the top right
- Paste the CSR into the textbox on the form generated for the server by the Cert Builder.
- Select the Certificate type, for a single hostname: InCommon SSL (SHA-2), more than one hostname: InCommon Multi Domain SSL option and verify all of the hostnames in the Subject Alternative Names field.
- Select the certificate term (1 year).
- Enter and verify a pass-phrase for the certificate: itarget
- External Requester: svc-ssladmin@pitt.edu
- In the Comments field, enter a brief description of the use for the certificate
- Click the Submit button
- Wait for certificate email from Sectigo follow directions
- Once new cert is installed revoke the old cert.
Feedback and Concerns:
If you have any feedback regarding this article, please reach out to hsitkb@pitt.edu. You can also leave a comment below as well.