FAQs

To send out the Certificate Enrollment Invitation, navigate to Certificates > Code Signing Certificates, click Invitations, click Add, and complete the necessary information. Invitations are no longer in the main table with certificates, they are kept separate to allow for easier management. More than one Code Signing certificate self-enrollment form enrollment endpoint can be added. They also allow URL customization. The Code Signing certificate self-enrollment form is not tied to a particular organization or department, the accounts added under the endpoint are. The account specifies what certificate profile will be used and how CSR generation is to be performed.

CSR generation methods include:

• Browser (available for private CA backend)
• Provided by the user (available for both public and private CA backends)

See release notes for 22.10 for more details: https://sectigo.com/knowledge-base/detail/Sectigo-Certificate-Manager-SCM-Release-Notes/kA03l00000117It

Setting and requesting a new Code Signing Certificate:

1. Log in to SCM
2. Go to Enrollment > Enrollment Forms
3. Create a new enrollment endpoint by selecting the green "+" 
4. Name the form and Select Type as "Code Signing Certificate self-enrollment form"
5. Click Next
6. Generate a URI Extension or add your own (Configuration options are not mandatory)
7. Hit Save
8. Select the Enrollment endpoint and click on Accounts Next, go to Accounts
9. Select the "+" under the Accounts
10. Select the appropriate Organization or dept and settings that you need and hit Save
11. Once the Account is created you can Send the Invitation or Share the Web form link with your users

Next

Test your settings by sending an Invitation email or using the web form. 

1. Under SCM go to Certificates > Code Signing Certificates  
2. Select "Invitations"
3. Select "+" fill out the info and hit Send
4. Go to the email and click on "Verify Email Address"
5. Fill out the form and hit "Submit"
6. The Certificate will be requested, then issued. Users will receive an email notification "the code signing certificate for ..... has been issued. They will be able to download the certificate from their portal using the endpoint URL where they requested the certificates. Users can only see their own certificates and not ones for all the org or dept. They will not get an email notification for collection and have to go to the URL to download it.