Skip to main content

Renew your code signing certificate

Use these steps to renew a Code Signing or EV Code Signing certificate in CertCentral.

Notice

For Subscription accounts, renew code signing certificates through your active subscription. In the CertCentral menu, go to My Digital Trust Products > Certificates. Select the order number of the certificate to renew and select Renew from the Certificate actions menu.

Before you begin

  • Organization validation:

    • Code signing certificate renewals: the organization must have current CS — Code Signing Organization Validation.

    • EV Code Signing certificate renewals: the organization must have current EV CS — Code Signing Organization Extended Validation.

  • For Code Signing certificates only: if adding a subject email address, the email domain must be validated and assigned to the organization in your account.

  • For HSM provisioning: generate the private key and CSR on the HSM before submitting the renewal. The CSR must use a minimum RSA 3072-bit or ECC P-256-bit key. Refer to your HSM manufacturer's instructions.

Renew a code signing certificate

  1. In the CertCentral menu, go to Certificates > Orders.

  2. Select the order number for the code signing certificate to renew.

  3. On the Order details page, in the Certificate actions menu, select Renew.

  4. On the renewal form, update the certificate details as needed.

  5. Under Provisioning options, select a provisioning method.

    The provisioning method does not need to match the original order. See Code signing provisioning methods for the full list of options and their requirements.

  6. Select Submit request.

Before DigiCert issues the renewed certificate, a validation agent calls a verified phone number to confirm authority to order on behalf of the organization. This call typically occurs within 24 hours of submission. DigiCert then sends an approval email to the verified contacts included in the renewal. After a verified contact approves the request, DigiCert issues the certificate.

Notice

Post-issuance steps depend on your provisioning method:

  • DigiCert-provided hardware token: DigiCert installs the certificate on the token and ships it to the address provided during the request.

  • Own supported hardware token: Download the certificate from your CertCentral account and install it on your token.

  • HSM: Download the certificate from your CertCentral account and install it on the HSM. See Download a code signing certificate.

What's next

Renew your code signing certificate to renew an expiring code signing or EV Code Signing certificate order

本节内容如下: