reseller
reseller
reseller
Using your GCC Partner Account to Resell SSL & Client Certificates Effectively
Digital Certificate Reseller Guide
TABLE OF CONTENTS
Enter your User ID and Password. Your User ID is the PARXXXX_xxxxx number given to you at the end of the Partner Signup;
you can also find it in your Welcome Email.
Your Password is the password you entered during the Partner Signup.
If you have forgotten your password click on Forgot your Password? Click here where you will be able to rest your
password.
If you still have difficulties logging into your account please contact Support at: www.globalsign.com/support.
FIRST LOG IN
When you log in to your Account for the first time, you will be prompted to set a Default Tab based on your user
requirement.
This can be changed at any time by navigating to the ACCOUNT & FINANCE Tab
and clicking on Default Tab Setting under the MY ACCOUNT menu section.
AVAILABLE PRODUCTS
x SSL Certificates offer the strongest encryption and allow secure connections from web server to a browser.
https://www.globalsign.com/en/ssl/
x PersonalSign Digital IDs for email signing and encryption, two factor authentication and digital signatures for
Microsoft Office documents.
www.globalsign.com/personalsign/
The discount levels are set by the level of funds put into your Account. All Partners initially have the default level of
discount, detailed as Rank 1 in the example table below, and receive this discounted pricing every time they purchase a
certificate using the Pay As You Go (no commitment to methods of payment – see Payment Options – Pay As You Go
section of this Quick Start Guide). This means you can buy at a discount without committing any funds to your account,
however in order to obtain higher discounts you must bulk purchase / deposit funds directly into your account.
Discount levels displayed are discounts of standard Pay As You Go pricing and not the SRP (Standard Retail Price) of
GlobalSign SSL. For the SRP of the SSL Certificates you are reselling please visit the SSL Certificates section of your
The below example discount structure shows how the discount structure operates.
regional GlobalSign website.
1 $180.00 $180.00 0%
Rank 1 is standard Pay As You Go pricing – the base discount level. In this example, to progress to Rank 2 you would need
to add $785 to your account, thereby automatically giving you a 12% discount over the standard PAYG pricing. Once you’ve
created bulk contracts / deposited enough funds to elevate you to a higher Rank, you stay on that rank for a 12 month
period. If you create any further bulk contracts / deposit additional funds during the 12 month period, the discount period
is automatically extended by 12 months. In other words, as long as you create bulk contracts / deposit additional funds
before the 12 month period expires, you will maintain your current discount rank.
The process of upgrading your rank (and hence discount) is automatic (alternatively contact your Account Manager) and
can be completed from within your account as described in the Payment Options – Bulk Orders / Depositing Funds into
Account section of this Quick Start Guide.
LICENSING MODELS
This option allows the reseller to package any SSL Certificates as part of a service or solution and is not restricted to a
particular SSL type, i.e. you can buy 500 OV and 200 EV within the one purchase. This is only available by speaking directly
to your Account Manager.
PAYMENT OPTIONS – CREATE BULK ORDER / DEPOSITING FUNDS INTO YOUR ACCOUNT
Using the Deposit Funds option gives you the best discounts. To be able to pay for certificates
using deposited funds you must first deposit funds into your account by clicking Create Bulk
Order or Add Deposit in the Account and Finance tab:
ADD DEPOSIT
Click Add Deposit under the Account and Finance tab and enter the specific amount of funds you
wish to add to your account. If the total Deposit needed exceeds a Rank Level, you will be
promoted to the next Rank Level where you will enjoy higher discounts.
Complete either a Create Bulk Order or Add Deposit as detailed above and click Purchase to add the funds to your account.
You have the choice of three payment types to settle the deposit amount.
x Credit Card
You will be asked to provide credit card details to be charged before the Deposit amount is added. The credit
card is charged immediately.
When buying certificates using the funds you have deposited, make sure to select Deposit as the Payment Option at the
payment point when ordering certificates.
Make sure that you are in the SSL section by clicking the SSL Certificates Tab on your GCC landing page:
b. If you have any promotional codes from GlobalSign, enter them next.
c. SSL Certificate Type – this is where you choose either a standard, wildcard or Public IP SSL Certificate.
SSL Certificate is Single Domain or will any Wildcard SSL (DomainSSL or OrganizationSSL only) or Public IP
options (OrganizationSSL only).
December 2018 - 10 -
Digital Certificate Reseller Guide
e. Specify the validity period – 1-2 years for DomainSSL, OrganizationSSL and ExtendedSSL.
f. Specify whether the certificate is to have free Unified Communications support for the WWW, OWA, mail
and Autodiscover subdomains (DomainSSL, OrganizationSSL, and ExtendedSSL only).
g. Specify whether the certificate is to have Subject Alternative Name (SAN) options (detailed below)
(DomainSSL, OrganizationSSL, and ExtendedSSL only).
December 2018 - 11 -
Digital Certificate Reseller Guide
You may specify up to 100 SANs per certificate at any one time.
The types of SANs allowed depends on the certificate type:
x DomainSSL - Unified Communications option or Subdomains
x OrganizationSSL - Unified Communications option, Subdomains, Internal Hostnames or Internal
IP Addresses, different Fully Qualified Domain Names and Public IP Addresses.
x ExtendedSSL - Unified Communications option, Subdomains, and different Fully Qualified
Domain Names.
h. Select whether you are Switching from a Competitor. Selecting the right option ensures you get the best
deal. If you are switching from a competitor we will automatically query the site holding the competitor’s
certificate and add any time left on that certificate to the replacement. If we cannot automatically find
the competitor’s certificate online, you have the opportunity to manually copy and paste the certificate
into a text box.
If you choose Yes, you may choose that 30 addition bonus days are added to the expiration date free of
charge to a maximum of 27th months.
j. Once you have completed the relevant details above, you will be shown the Total Amount for your
Certificate.
December 2018 - 12 -
Digital Certificate Reseller Guide
c) On the Product Point of Contact for Certificate Delivery / Vetting Issues page enter the details of the person to be
associated with the order.
The person entered here can receive the actual SSL Certificate and the Certificate Renewal Notices.
If you have registered other Users for the account you can select the User from the drop down list and click Auto
Fill (see section Creating / Managing Users) to avoid filling in this form for every order. Alternatively, you can
specify new contact details, for example the actual customer – but only do this if you want GlobalSign to send the
SSL Certificate and Certificate Renewal Notices directly to your customer.
Notes:
I. It is highly recommended that you provide the end customer details on this form.
If you do not provide the end customer details, you will be required to contact the Vetting team to provide
them with the customer contact details. Failure to do this, will result in a delay in issuing the certificate.
II. GlobalSign does not include any pricing information in any communications with your end customer.
III. Check the box Set Point of Contact to have the SSL Certificate and Certificate Renewal Notices sent to User
you have just specified. If you do not check this box, the SSL Certificate will only be sent to you.
IV. You may specify an additional 2nd contact to just receive the Issued Certificate and Renewal Notices if you
wish.
December 2018 - 13 -
Digital Certificate Reseller Guide
d) On the Product Application CSR Entry Page copy and paste the CSR (Certificate Signing Request) into the text box.
The CSR will be decoded and you will be given the option to fix any errors manually.
Details on CSR Requests can be found here.
Enter CSR: copy and paste the Certificate Signing Request created on the customer’s web server into the box.
December 2018 - 14 -
Digital Certificate Reseller Guide
e) If the certificate order is for a DomainSSL you will be taken to the Approver Email page. Select the most
appropriate email address that GlobalSign can send the Approver Email to. The email contains a link to “Approve”
the application, and unless the link is followed and the I APPROVE button is clicked, the Certificate will not be
issued.
Note: If you do not see an appropriate email address, select any and then contact Support for advice on how best
to continue.
You also have the option to use HTTP Verification and/or DNS Verification.
f) If you have selected SANs, you will be presented with the following screen to enter the details see details below.
December 2018 - 15 -
Digital Certificate Reseller Guide
g) If the certificate order is for OrganizationSSL you will be taken to the ‘Enter Organization Information’ page. This
page captures the company details of the customer (not you as the reseller) and will be validated by the
appropriate regional GlobalSign Vetting Team. Ensure you enter accurate information to avoid delays in the
validation process.
December 2018 - 16 -
Digital Certificate Reseller Guide
December 2018 - 17 -
Digital Certificate Reseller Guide
Note: depending on your territory and account type, not all payment types will be available.
a. Deposit – the fee for the certificate will be deducted from your Deposit balance (see the Payment Options
– Bulk Orders / Depositing Funds into Account section of this Quick Start Guide).
Alternatively, you may use one of the Pay As You Go payment methods (see the Payment Options – Pay As You Go
section of this Quick Start Guide):
b. Bank Transfer –
i. Payment in Advance: Select for an invoice to automatically appear in the View / Request
Invoices section under the Account and Finance tab. This invoice can be printed and submitted
to your purchasing department. GlobalSign will only issue the certificate once the funds are
transferred by your purchasing department directly to the GlobalSign bank account.
ii. Payment in Arrears: Select to request the deposit amount funds are settled within the standard
payment terms. At the end of the calendar month an invoice will automatically appear in the
View / Request Invoices section. Once you have settled the invoice your credit limit will return
to the previous limit level.
c. Credit Card – you will be asked to provide credit card details to be charged before the certificate can be
issued. The funds are reserved at the point of order and the credit card is charged seven days after the
certificate has been issued.
December 2018 - 18 -
Digital Certificate Reseller Guide
1. Log into your GlobalSign Certificate Center (GCC) account and within the SSL Certificates tab select the ‘Find order’
icon or the ‘Search Order History’ link in the left column.
2. Provide an order number (case sensitive) or just click on “Search” to view all orders.
5. Choose which type of SANs you wish to add from the form below:
December 2018 - 19 -
Digital Certificate Reseller Guide
6. On the next page you will need to fill in your requested SANs. You will then be asked for payment details if
applicable. Once this is completed your order will have to be validated. The technical contact on the account will
receive an email once the validation process has been completed.
Note: Once the validation has been completed you will need to reissue the certificate. Instructions for the
reissue process can be found here.
December 2018 - 20 -
Digital Certificate Reseller Guide
INITIATE A CERT-INVITE
This method is significantly simplified and requires you to enter only the contact details of the customer. It does not
require you to enter their company information or CSR. When you create a Cert-Invite, GlobalSign will generate a unique
code specific to the order and give you a PIN. We then send an email to the customer containing a link. You must
communicate the PIN to the end user yourself – typically we would suggest doing this once you have received payment
from your customer.
You may only create Cert-Invites if you have funds deposited into your account (see section on Payment
Options – Bulk Orders / Depositing Funds into Account > Add Bulk Order / Add Deposit).
1. Make sure you are on the SSL Certificates tab. Click New Cert Invite in the left menu.
3. On the New Cert-Invite page specify the Cert-invite recipient details. These are the details of the customer who
will be emailed an invitation to complete the SSL Certificate application process. Make sure the customer’s email
address is in the Cert-Invite Recipient Email Address field.
4. Next you will be asked to confirm the application details you provided and review GlobalSign’s Subscriber
Agreement.
December 2018 - 21 -
Digital Certificate Reseller Guide
5. Click Complete and you will be presented with the PIN associated with that Cert-Invite application. Make sure
your customer is given this to be able to proceed with the application.
December 2018 - 22 -
Digital Certificate Reseller Guide
For Cert-Invite applications go to Search Certificate Invites in the SSL Certificate section. This page allows you to
search for Cert-Invites given certain criteria.
For added convenience, certificates within the renewal range (90 days prior to expiration) will be listed on the home screen
of the SSL Certificates tab in the Upcoming Renewals section. Simply click the Renew button next to the appropriate order
to begin the renewal process. Full details on renewing your SSL Certificate can be found in our Support Portal.
Note: If you renew a customer’s certificate before it expires, we will add any remaining time onto the new certificate but
not exceeding 27 months.
December 2018 - 23 -
Digital Certificate Reseller Guide
CANCELLING AN ORDER
If you wish to cancel a completed order you may do so automatically within the 7 day refund period. Depending on how
you paid for the certificate, cancelled orders automatically refund the appropriate amount of credit to deposit accounts,
directly refund credit cards or cancel outstanding invoices. To cancel an order:
4. Review the order details to verify the order is the correct application to cancel, scroll to the bottom of the page
and click the Confirm button.
December 2018 - 24 -
Digital Certificate Reseller Guide
Note: Revoking a certificate cannot be undone and there will be no refund. Speak to GlobalSign for advice if you are
unsure.
x To revoke an SSL Certificate, log into your Partner account, locate the order via the Order History, click Edit, and
click Revoke.
x To revoke a Client Certificate you must contact GlobalSign. Partners are not permitted to directly revoke Client
Certificates. GlobalSign will need to ascertain the reason for revocation with the end customer directly and
document their confirmed approval to revoke.
Note: If your customer cannot receive the approver email at the address selected during the application, contact GlobalSign
Support.
2. Click the Edit button next to appropriate Cert-Invite application and change the PIN Status from Unused to Void.
December 2018 - 25 -
Digital Certificate Reseller Guide
3. Click the Confirm button and then the Complete button to commit the change.
Note: Once a Cert-Invite PIN is voided it cannot be reactivated. You will not be charged for voiding any Cert-Invite
PINs.
Make sure that you are in the Client Certificates section by clicking the Document, Code & Email Signing tab on your GCC
landing page:
Before placing an order, or allowing your customers to place an order, please be familiar with the ordering process as
detailed below:
December 2018 - 26 -
Digital Certificate Reseller Guide
1. Share the Customer Ordering URL with your customers, either directly or hooked into your web pages. You can
obtain your unique URL by clicking on Customer Ordering URL within the Client Certificates section of your GCC
account (located on the Document, Code & Email Signing tab).
December 2018 - 27 -
Digital Certificate Reseller Guide
When a customer clicks on the Ordering URL they will enter the below application process:
1. On the certificate type selection page select the Client Certificate type – Document, Code & Email Signing tab
2. They will then enter the application flow the specific product type.
3. Enter the Certificate Identity Details. This is the information that will be included in the Certificate.
In other words, the Subscriber’s details (end customer to whom GlobalSign issues the certificate) which will be
verified by GlobalSign.
a. Enter the identity details.
b. Remember the pickup password. If the password is lost or forgotten, the order must be canceled and
placed again for security reasons.
4. Enter the Subscriber Details. The Subscriber is the person or organization to which the certificate will be issued.
These details will be needed for validation and possibly authorization purposes.
You, as the Partner, will be alerted via email when a new order has been placed. You must now complete the following:
1. Log into your GCC account and go to the Document, Code & Email Signing tab.
2. Click on Pending Approvals.
December 2018 - 28 -
Digital Certificate Reseller Guide
1. On the Document, Code & Email Signing tab, click Order Certificate under the My Certificates section of the left
navigation menu.
2. On the Client Certificate – Order New Certificates type, choose either PersonalSign, Code Signing or AATL
Certificate.
3. You will then enter the application flow the specific product type.
a. Select the validity period.
b. If you have any promotional codes from GlobalSign, enter them here.
4. Enter the Certificate Identity Details. This is the information that will be included in the Certificate.
In other words, the Subscriber’s details (end customer to whom GlobalSign issues the certificate) which will be
verified by GlobalSign.
a. Enter the identity details.
b. Remember the pickup password. This password must be communicated by the Partner to the Subscriber
via a secure method. GlobalSign will never communicate this password to anyone, Partner or Subscriber.
If the password is lost or forgotten, the order must be canceled and placed again for security reasons.
5. Enter the Subscriber Details. The Subscriber is the person or organization to which the certificate will be issued.
These details will be needed for validation and possibly authorization purposes.
7. Confirm the application details. The customer’s email address you included in the application will receive an email
that the application has been placed.
8. Once the information included in the application has been verified by our Vetting Team, an email will be sent to
the email address you included in the application with instructions for picking up the certificate. The Certificate
holder will need the pickup password created during the application process, in order to pick up and install the
certificate.
December 2018 - 29 -
Digital Certificate Reseller Guide
x If an email address has been entered into the Certificate Identity Details section, GlobalSign will send an Approval
Email to the email address entered. Unless the Applicant approves the order, the order will not be issued. Clicking
the link in the email will open an Approve Application web page containing an Approve or Reject button:
x If the Client Certificate requires validation, such as PersonalSign 2, PersonalSign 2 Pro, PersonalSign 2 Department,
Code Signing or any of the PDF Signing Certificate products, the certificate will not be released for pickup until
validation is complete. GlobalSign will automatically send a Pickup Email to the Subscriber when the certificate
application has been validated.
x The certificate is issued when the certificate pickup link, contained within the Pickup Email is followed, and the
Pickup Password is entered into the page.
December 2018 - 30 -
Digital Certificate Reseller Guide
CANCELLING AN ORDER
If you wish to cancel a completed order you may do so automatically within the 7 day refund period. Depending on how
you paid for the certificate, cancelled orders automatically refund the appropriate amount of credit to deposit accounts,
directly refund credit cards or cancel outstanding invoices. To cancel an order:
1. While on the Document, Code & Email Signing tab in your GCC account, click Search Order History.
2. Search for the appropriate order and click the Edit button.
3. Click the Cancellation Request button located at both the very top and very bottom of the Certificate Edit screen.
December 2018 - 31 -
Digital Certificate Reseller Guide
4. Check the order is the correct application to cancel, scroll to the bottom of the page and click the Confirm button.
1. While on the Document, Code & Email Signing tab in your GCC account, click Search Order History under FIND
CERTIFICATES.
2. Search for the appropriate order and click the Edit button.
December 2018 - 32 -
Digital Certificate Reseller Guide
3. Click the Resend Approval Mail button located at both the very top and very bottom of the Certificate Edit screen.
4. Check the order is the correct application to resend the Approver email, scroll to the bottom of the page again and
click the Complete button.
Note: If your customer cannot receive the approver email at the address selected during the application, contact GlobalSign
Support.
1. While on the Document, Code & Email Signing tab in your GCC account, click Search Order History under FIND
CERTIFCATES.
2. Search for the appropriate order and click the Edit button.
December 2018 - 33 -
Digital Certificate Reseller Guide
3. Click the Reissue button located at the very top and very bottom of the Certificate Edit screen.
4. Create a Pickup Password, re-enter and check the Required box. Click Next.
December 2018 - 34 -
Digital Certificate Reseller Guide
6. Confirm your details and check the Subscriber Agreement box. Click Complete.
December 2018 - 35 -
Digital Certificate Reseller Guide
For added convenience, certificates within the renewal range (90 days prior to expiration) will be listed on the home screen
of the Document, Code & Email Signing tab. Simply click the Renew button next to the appropriate order to begin the
renewal process. You can also renew certificates by going to Order History under the Reporting section, searching for the
appropriate order, and clicking on the Renew button.
Note: If you renew a customer’s certificate before it expires, we will add any remaining time to the new certificate. In
addition, some certificates (i.e. SSL Certificate) give you the option of adding an extra 30 days free.
USER ROLES
You may add additional Users to your GCC account. Depending on their privileges newly created Users may place new
certificate orders, add Deposit funds, or perform reporting. Users are defined in roles:
x Account Administrator: Users who are the top level account owner can see all menus, perform all functions and
have the ability to create new Managers and Staff in Charge.
x Manager: Users who have their administration rights defined by the Account Administrator and can create Staff in
Charge.
x Staff in Charge: Users who have their administration rights defined by the Account Administrator or the Manager.
Unlike Account Administrators and Managers, Staff in Charge cannot create additional Users.
December 2018 - 36 -
Digital Certificate Reseller Guide
Complete the details of the new User and select their role by selecting either Manager or Staff in Charge in the User
Permissions. Set their privileges as follows:
Note: all users can place orders; only users with Certificate Approval Permission can place orders that do not
need to be approved by users with Certificate Approval Permission.
December 2018 - 37 -
Digital Certificate Reseller Guide
GETTING HELP
Every GlobalSign Partner has a dedicated Account Manager who is on hand to help with any commercial and technical
queries you may have about reselling SSL. GlobalSign also provides technical support through our Client Service
departments around the world. www.globalsign.com/support
December 2018 - 38 -