Order an EV code signing certificate

Before you begin

  • Prevalidate organization
    Prevalidate the organization you want to get an EV Code Signing certificate for. See Add an organization and Submit an organization for prevalidation.
    For an organization to appear on the Request an EV Code Signing Certificate order form, you must first submit the organization for prevalidation.
  • Generate CSR (HSM orders only)
    If you plan to install your EV Code Signing certificate on an HSM device, you must submit a certificate signing request (CSR) with your order.
    To remain secure, certificates must use at least a 2048-bit key size. Refer to your HSM provider's documentation to create the CSR for your request.

Order your EV Code Signing certificate

In the left main menu, hover over Request a Certificate then, under Code Signing Certificates, select EV Code Signing. Fill out the Request an EV Code Signing Certificate form and submit.

Certificate Settings

  1. Organization

    In the dropdown, select the organization you are ordering the EV Code Signing certificate for. This organization name will appear on the EV code signing certificate

  1. Organization Unit

    Adding an organization unit is optional. You can leave this box in the form blank.

If you include an organization unit in your order, DigiCert must validate it before we your certificate can be issued.

  1. Signature Hash

    In the dropdown, select a signature hash for the certificate: SHA-256 (recommended) or SHA-1.

  1. Validity period

    Select a validity period for the certificate: 1 year, 2 years, or 3 years.

  1. Additional Renewal Message

    To create a renewal message for this certificate, type a message with information relevant for the certificate’s renewal.

  1. Additional Emails

    Enter the email addresses (comma separated) for the people you want to receive the certificate notification emails, such as certificate issuance, certificate renewals, etc.

  1. Auto-renew

    To set up automatic renewal for this certificate, check Auto-renew order 30 days before expiration.

    With auto-renew enabled, a new certificate order will be automatically submitted when this certificate nears its expiration date. If your certificate still has time remaining before it expires, DigiCert adds the remaining time from your current certificate to your new certificate (up to 39 months).

Provision Options

  1. Preconfigured Hardware Token

    DigiCert installs your EV CS certificate on a secure token and ships the token to you with instructions for how to activate it. See Currently Supported eTokens.

    Next, select a Shipping Method (Standard or Expediated). Then, add your shipping information: your name and the address you want us to send the token to.

  1. Use Existing Token

    After DigiCert issues your EV CS certificate, you need to install the certificate on your token.

    In the Platform dropdown, select the type of hardware token you plan to install your EV CS certificate on.

You must have a FIPS 140-2 Level 2 compliant device. See Currently Supported eTokens.

  1. Install on HSM

    After DigiCert issues your EV CS certificate, install it on your HSM device.

    1. In the Select Platform dropdown, select the type of HSM device you plan to install your EV CS certificate on.
    2. Upload or paste your CSR in the Add Your CSR box.

Payment Information

  1. Select Payment Method

    Under Payment Information, select a payment method to pay for the certificate:

    1. Bill to Credit Card
      Don’t have a contract or don’t want to use the contract to pay for this certificate? Use a credit card to pay for the certificate.
      We authorize the card when the request is made. However, we only complete the transaction once we issue your certificate.
      If you have a contract enabled, check 'Exclude from contract terms'.
    2. Bill to Account Balance
      Don’t have a contract or don’t want to use the contract to pay for this certificate? Bill the cost to your account balance.
      To deposit funds, click the Deposit link. This link takes you to another page inside your CertCentral account. Any information entered in the request form will not be saved.
      If you have a contract enabled, check 'Exclude from contract terms'.
    3. Pay with Contract Terms
      Have a contract and want to use it to pay for the certificate? When you have a contract, it is the default payment method.

  1. Certificate Services Agreement

    Read through the agreement and check I agree to the Certificate Services Agreement.

  1. Click Submit Certificate Request.

What's next

Complete organization validation

Before your certificate can be issued, we need to validate your authority to order a certificate for the organization on your EV code signing certificate. A validation agent will call a verified phone number to speak with someone who represents you (the certificate requestor) and can confirm your authority:

  • Human resources
  • Manager
  • Technical contact

To complete the organization consent for your certificate order:

  • Answer the organization validation phone call (preferred method)
    After you submit your certificate order, make sure that the organization contact, technical contact, and company receptionist are aware that you’ve ordered an EV code signing certificate. Let them know that DigiCert will call a verified phone number to speak with one of them to make sure you have permission to order this certificate. This phone call usually takes place within 24 hours of the certificate order being placed.
  • Respond to the organization consent message
    If the DigiCert validation agent can’t reach someone who represents you at the verified phone number, they will leave a message that includes a call back phone number and a verification code. Make sure that organization or technical contact responds to the message and provides us with the verification code.
  • Schedule a time for a call back through the verified phone number
    If the DigiCert validation agent can’t reach someone who represents you at the verified phone number, they may send you an email to schedule a time for us to call back to complete the verification. You may use this link to schedule a time when the representative will be available to answer the call: https://digicert.simplybook.me/v2/#book.
    Appointments display in your local time. You don't need to convert the time.

Order approval

After DigiCert completes all validation required for your order, we send the EV CS verified contacts for the organization an email informing them that they need to approve the EV code signing certificate request. Only after we receive the approval, can we continue processing your order.

Certificate issuance

Once the validation process is completed, we will issue your certificate.

Informazioni

DigiCert è il primo fornitore al mondo di certificati digitali ad alta garanzia, fornendo SSL e KPI private e gestite sicuri e certificati dispositivo per il mercato emergente delle IoT. Dalla nostra fondazione avvenuta quindici anni fa, l’idea di trovare un modo migliore ha stuzzicato la nostra mente. Un modo migliore per fornire l’autenticazione su Internet. Un modo migliore per creare soluzioni su misura per le esigenze dei nostri clienti. Adesso abbiamo aggiunto l’esperienza di Symantec e il talento alla nostra eredità di innovazione per trovare un modo migliore per far progredire il settore e costruire una maggiore fiducia nell’identità e nelle interazioni digitali.

©2019 DigiCert, Inc. Tutti i diritti riservati. DigiCert e il rispettivo logo sono marchi registrati di DigiCert, Inc. Symantec e Norton e i relativi loghi sono marchi utilizzati su licenza di Symantec Corporation. Altri nomi possono essere marchi dei rispettivi titolari.