NOTE: This process is only applicable to certificates for hosts with a name ending in "ucsb.edu." No other domains are approved for this process. Please read all the following information before submitting a Certificate Signing Request (CSR).
Two types of SSL certificates are currently available to ucsb.edu domains through our Enterprise agreement with GeoTrust:
a standard SSL certificate ("Enterprise SSL certificate" in this document), and a wildcard SSL certificate ("Enterprise SSL wildcard certificate").
When in doubt, order an Enterprise SSL certificate. For general information on wildcard certificates, please see GeoTrust's FAQ about the SSL Web Server Wildcard Certificate.
The following steps apply to new and renewal certificates:
Generate a Certificate Signing Request (CSR). For instructions, select your server type on GeoTrust's Generate a Certificate Signing Request page.
- Note that the "Organization Name" must be "University of California Santa Barbara," and the "Common Name" must end with "ucsb.edu".
- Use a 2048-bit or larger key when generating the CSR, since shorter keys will result in delays and possible rejection. Those requesting a certificate renewal using an existing CSR should verify the key length is at least 2048 bits.
For a standard Enterprise SSL certificate, go to GeoTrust's Enterprise SSL Certificate Enrollment page to submit your certificate request. (For an Enterprise SSL wildcard certificate, go to Enterprise SSL Wildcard Certificate Enrollment.)
- The first page includes a "Special Instructions" box where you should provide the appropriate recharge account number (e.g., 8-123456-19900-3) and the departmental Billing Contact's name, email address, and phone number. The Billing Contact should be the account controller responsible for the recharge account; that person will be contacted to confirm the purchase and to ensure that he or she is aware of the subsequent recharge cost.
- When prompted for a Technical Contact, it is advisable to use a role-based email address, such as "tech-support@mydept.ucsb.edu," to ensure subsequent renewal notices are delivered despite potential staff changes.
A confirmation email will be sent to all listed contacts upon completion of the above request process. A copy of the notice will also be sent to campus SSL administrators.
One of the campus SSL administrators will review the request and solicit confirmation from the Billing Contact. Upon confirmation, the certificate will be approved and issued.
Issued certificates are sent via email to the contacts listed during the request process.
Be sure to follow GeoTrust's SSL Certificate Installation Instructions for your server (in the Vendor column) and your product (Enterprise SSL Certificate) when installing your certificate.
The cost of the certificate will be batched with other certificate orders and recharged via Accounting. This happens approximately once every three months.
Questions may be directed to ssl@ucsb.edu.
KPS
