NOTE: This process is only applicable to certificates for hosts with
a name ending in "ucsb.edu." No other domains are approved for this
process. Please read all the following information before submitting
a Certificate Signing Request (CSR).
Two types of SSL certificates are currently available to ucsb.edu domains through our Enterprise agreement with GeoTrust:
a standard SSL certificate ("ESSL certificate" in this document), and a wildcard SSL certificate ("ESSL wildcard certificate").
When in doubt, order an ESSL certificate. For general information
on wildcard certificates, please see GeoTrust's FAQ about the SSL Web Server Wildcard Certificate.
The following steps apply to new and renewal certificates:
Generate a Certificate Signing Request (CSR). For instructions, select your server type on GeoTrust's Generate a Certificate Signing Request page.
- Note that the "Organization Name" must be "University of California Santa Barbara," and the "Common Name" must end with "ucsb.edu".
- Use a 1024-bit or larger key when generating the CSR, since shorter keys will result in delays and possible rejection.
For a standard ESSL certificate, go to GeoTrust's ESSL Certificate Enrollment page to submit your certificate request. (For an ESSL wildcard certificate, go to ESSL Wildcard Certificate Enrollment.)
- The first page includes a "Special Instructions" box where you should provide the appropriate recharge account number (e.g., 8-123456-19900-3).
- When prompted for a Technical Contact, it is advisable to use a role-based email address, such as "tech-support@mydept.ucsb.edu," to ensure subsequent renewal notices are delivered despite potential staff changes.
- The Site Administrator Contact should be the account controller responsible for the recharge account; that person will be contacted to confirm the purchase and to ensure that he or she is aware of the subsequent recharge cost.
A confirmation email will be sent to all listed contacts upon completion of the above request process. A copy of the notice will also be sent to campus SSL administrators.
One of the campus SSL administrators will review the request and solicit confirmation from the Billing Contact. Upon confirmation, the certificate will be approved and issued.
Issued certificates are sent via email to the contacts listed during the request process.
The cost of the certificate will be batched with other certificate orders and recharged via Accounting. This happens approximately once every three months.
Questions may be directed to ssl@ucsb.edu.
KPS
