FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

Overview Sectigo’s public roots are as widely trusted as any other in the industry. In fact, Sectigo’s root ubiquity is well in excess of 99.99% of systems in use today and is 100% for modern browsers, mobile devices, and operating systems.

Why signing a Visual Basic for Applications (VBA) macro with a code signing certificate on a SafeNet token fails with a digital certificate error, and the registry change that resolves it.

Private Key overview and Protection Process

This article explains how to resolve the "Unable to decrypt message" error that Gmail recipients see when they open S/MIME-signed or encrypted email sent from Microsoft Outlook. It covers the certificate and cryptographic-algorithm causes and the Outlook settings that fix them.

This article explains how to switch the smart card reader driver so a USB token is detected and its certificate is accessible in SafeNet on Windows Server 2022.

This article explains how to resolve the Microsoft Outlook error "Your Digital ID name cannot be found by the underlying security system," which stops encrypted email from opening. It covers the usual causes and three step-by-step fixes.

CAA records let you specify which certificate authorities may issue certificates for your domain. This article explains what a CAA record is and how to add one to authorize Sectigo, including how to resolve CAA check pre-sign failures for SSL/TLS and S/MIME certificates.