All pages
Powered by GitBook
1 of 8

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Management

Domains

The Domains Management section is designed to provide a centralized platform for managing all domains, monitoring their status, and handling Domain Control Validation (DCV) processes to ensure streamlined and secure domain verification.

Benefits of Domains Management

Enhanced Control and Visibility:

  • Enhanced Control and Visibility:

    • Users gain a single platform to view and manage all domains, improving efficiency and reducing the risk of lapses in domain verification or expiration.

  • Streamlined Verification Process:

    • The ability to adjust DCV methods and track status simplifies the management of compliance requirements and keeps domains secure.

  • Secure Domain Addition:

    • Adding new domains with ownership verification helps maintain the security of the domain portfolio and prevents unauthorized additions.

    • By centralizing these functions, the Domains Management section helps organizations maintain a secure, organized, and fully validated domain portfolio, crucial for digital security and operational efficiency.

Manage and View Domain Information

  • Detailed Domain Information:

    • For each domain, users can access detailed information, including domain name, creation date, verification details, and ownership records. This allows users to have complete visibility over each domain’s setup and history.

  • Editing Domain Information:

Domain Control Validation (DCV) management

  • Flexible DCV Method Changes:

    • The Domain Control Validation (DCV) method can be altered if a different verification method is preferred or required. Users can select from multiple DCV methods such as Email, DNS, or HTTP, depending on what best suits the domain and organization’s needs.

  • Sending for Approval:

Adding a New Domain

  • Creating and Verifying New Domains:

New domains can be added through this feature, where they undergo a verification process to confirm domain ownership. This includes setting up the domain’s information and initiating the DCV process to ensure the domain is validated correctly.

  • Domain Ownership Verification:

    • As part of the new domain creation, verification is conducted to confirm that the domain belongs to the requesting organization. This security step prevents unauthorized domain additions and enhances trust. To Know more about DCV method, click here.

  • DCV Method Overview:

Domain List and Status Overview

  • Comprehensive Domain Listing:

    • All domains that have been created are listed here in an organized format, allowing users to view and access each domain quickly. This includes both active and inactive domains.

  • Status Indicators:

Manage and View Domain Information

  • Detailed Domain Information:

    • For each domain, users can access detailed information, including domain name, creation date, verification details, and ownership records. This allows users to have complete visibility over each domain’s setup and history.

  • Editing Domain Information:

Domain Control Validation (DCV) management

  • Flexible DCV Method Changes:

    • The Domain Control Validation (DCV) method can be altered if a different verification method is preferred or required. Users can select from multiple DCV methods such as Email, DNS, or HTTP, depending on what best suits the domain and organization’s needs.

  • Sending for Approval:

Adding a New Domain

  • Creating and Verifying New Domains:

New domains can be added through this feature, where they undergo a verification process to confirm domain ownership. This includes setting up the domain’s information and initiating the DCV process to ensure the domain is validated correctly.

  • Domain Ownership Verification:

    • As part of the new domain creation, verification is conducted to confirm that the domain belongs to the requesting organization. This security step prevents unauthorized domain additions and enhances trust. To Know more about DCV method, click here.

  • DCV Method Overview:

Templates

Templates are predefined structures or configurations used for simplifying processes such as generating certificates, configuring servers, or automating SSL/TLS settings.

Users can modify or update domain-related details directly from this section, ensuring that the information is always current and accurate. This is particularly useful when domain ownership changes or updates are needed for compliance or business requirements.
Once the DCV method is chosen, users can initiate the approval process. This is essential for completing the domain verification process and is done with a single click, streamlining the workflow.
  • Tracking DCV Status and Expiry Date:

    • For each domain, the DCV status (e.g., Pending, Approved, Rejected) and Expiry Date of the validation are prominently displayed. This allows users to stay informed on when validations need renewal and if any issues arise in the approval process, they can be addressed promptly.

  • To understand the available DCV methods, users can click on the provided link, which explains the options (Email, DNS, or HTTP) and their specific requirements. This resource ensures that users select the most suitable DCV method for their needs.
    Each domain displays a status indicator (e.g., Verified, Pending, Expired), providing users with an instant overview of the verification and operational state of each domain. This feature helps in identifying any domains that may need immediate attention for renewal or verification.
    Users can modify or update domain-related details directly from this section, ensuring that the information is always current and accurate. This is particularly useful when domain ownership changes or updates are needed for compliance or business requirements.
    Once the DCV method is chosen, users can initiate the approval process. This is essential for completing the domain verification process and is done with a single click, streamlining the workflow.
  • Tracking DCV Status and Expiry Date:

    • For each domain, the DCV status (e.g., Pending, Approved, Rejected) and Expiry Date of the validation are prominently displayed. This allows users to stay informed on when validations need renewal and if any issues arise in the approval process, they can be addressed promptly.

  • To understand the available DCV methods, users can click on the provided link, which explains the options (Email, DNS, or HTTP) and their specific requirements. This resource ensures that users select the most suitable DCV method for their needs.

    Products

    To create a new custom private product, go to Certificates> Products. By default, both public & private tabs will be displayed.

    • Private: Displays a list of default private PKI products along with private products created by the account user.

    • Public: Displays all the default emSign public products mapped to the account.

    Note: Account users won’t have a provision to add the new public product.

    Creating a New Private PKI Product

    Click the "Create product (+)" button located on the right below screen.

    Enter product details

    • Product Name: Provide a unique name for the product.

    • Validity: Define the product validity period.

    • Select Subordinate CA: Choose from the list of available end-entity private CAs.

    • Certificate Profile: By default, the custom type will be displayed.

    Depending on the selected template, a predefined setup profile will appear.

    Configure Certificate Details

    • Subject Attributes: Provide the necessary subject attributes.

    • Subject Alternative Name (SAN) Attributes: Add relevant SAN attributes.

    • CA Extensions: Mark the required CA extensions for the certificate.

    Advanced Settings

    Automatically Approve the Certificates

    • Enabled No administrator intervention is required for order approval as it will be fully automated. Upon placing the order, the system will generate an Order ID automatically.

    • Disabled: Administrator approval is required before the order is processed.

    • Specify Validation Checklist: The validation checklist configured here will appear under New Request > Order Summary & Payment section for administrator review. Additionally, the account user can specify the conditions & presence to tailor the checklist for order approval.

    Important Notes:

    Dynamic vs Fixed fields:

    • Dynamic field restriction: Values for Subject Attributes and Subject Alternative Name (SAN) Attributes can be provided later at the New Request level.

    • Fixed Field restriction: Values must be defined during product creation and will remain consistent across all orders using this product.

    What's Next?

    Once the product is successfully created, it will become available under New Request> Products. Users can select this product to place orders.

    Provisioning Templates

    This page is used to create configuration templates for certificates. These templates define the necessary attributes and settings for certificate generation, such as the CSR template, key pair types, and deployment methods.

    Create provisioning templates

    Step 1:

    • In Certificate Information tab, enter the unique Template Name.

    • Select the Origin of the Certificate configuration from the dropdown menu.

    Select the CSR template from the dropdown menu. If CSR template is not created, click here to view on how to create a custom CSR template.
  • By default, the Default Template is set as Yes.

  • Step 2:

    · Select the Key Pair Type. If New is selected, new key is generated.

    · If Key Pair Type is selected as Existing, previously created keys are listed for user to select.

    · If Key Store Password Type is selected as Random, a random system generated password is created which can be viewed later. If Manual is selected, the user can provide any desired password.

    · In CA Type tab, select the CA and CA Connector name and click on Save button.

    Step 3:

    · Select the CA from the dropdown menu.

    · Select the CA Connector Name from the dropdown menu and click on Save button.

    Step 4:

    · After Provisioning template is created, it is listed with status as Active.

    Edit provisioning templates

    · Under Actions tab, click on the Edit Template icon, the page will be redirected to Update Provisioning Template page.

    · Edit the fields and click on Update button. The changes made will be updated successfully.

    Clone provisioning templates

    · Under Actions tab, click on the Clone Template icon, the page will be redirected to Clone Provisioning Template page.

    · Enter the new Unique name and click on Save button. The template will be cloned successfully.

    Disable provisioning templates

    · Under Actions tab, click on the Disable Template icon, confirmation popup is opened.

    · Click on Yes button, the template will be disabled successfully.

    Delete provisioning templates

    · Under Actions tab, click on the Delete Template icon, confirmation popup is opened.

    · Click on Yes button, the template will be deleted successfully.

    Certificate Template:

    • Choose from one of the following templates:

      • Client TLS

      • Mutual TLS

      • Server TLS

      • Email Protection

    Once all product details are filled, click the "Create" button to proceed.

    CSR Templates

    This page is used to create and manage CSR (Certificate Signing Request) templates. Enter the required details like signature algorithms and key sizes and configure the subject DN details to simplify the CSR generation process for your organization.

    Create CSR Templates

    Step 1:

    • To create custom CSR template, unique Template name to be provided.

    • The Signature Algorithm, Key Algorithm, Key Size to be selected from the dropdown list.

    Step 2:

    • In Subject DN details, select the desired field to be added to the CSR. If any new field to be added other than the ones displayed administrators can click on "(+)" button to add new custom field.

    Step 3:

    • Subject Alternative Name can be selected by selecting the checkbox and click on Save button.

    Step 4:

    • After CSR template is created, it is listed with status as Active.

    Edit CSR templates

    • Under Actions tab, click on the Edit Template icon, the page will be redirected to Update CSR Template page.

    • Edit the fields and click on Update button. The changes made will be updated successfully.

    Clone CSR templates

    • Under Actions tab, click on the Clone Template icon, the page will be redirected to Clone CSR Template page.

    • Enter the new Unique name and click on Clone button. The template will be cloned successfully.

    Disable CSR templates

    • Under Actions tab, click on the Disable Template icon, confirmation popup is opened.

    • Click on Yes button, the template will be disabled successfully.

    Delete CSR templates

    • Under Actions tab, click on the Delete Template icon, confirmation popup is opened.

    • Click on Yes button, the template will be deleted successfully.

    Orders

    Users can view or edit existing requests on the Orders page. By default, the last 10 request/orders are displayed, as shown below.

    By clicking 'Advanced Search,' the account user can further filter requests using criteria such as:

    • Date Range

    • Domain Name

    • Organization Name

    • Product

    • Other available details

    Approve Sub Account Certificate Request

    Navigate to the Certificates > Orders. Open the order with the status "Order pending for parent approval".

    • Click the "View" button on the orders page to verify all relevant information related to the certificate orders

    • After verifying the details, click the “Approve” button.

    • Upon clicking "Approve", the system will navigate to New Request > Order Summary & Payment Page.

    • Click "Pay now" to complete the payment. The will be deducted from the main user account balance within the default group.

    • Once payment is completed, the system will redirect to the orders page displaying all the necessary information and its associated Order.

    What's Next?

    Upon successful order placement, the certificate requester / Organization representative will receive an Order Confirmation email.

    The email will include a link to the Track Orders page, where users can monitor the certificate verification process.

    Save as Draft Request

    • Upon clicking the "Save" button on the Order Summary & Payment page, the request will appear on, the Orders page with the status "On Hold".

    • If the status is "On Hold", it can either be processed /rejected from Oorders view page as shown below.

    • Rejecting the Request: Click the "Reject" button and enter the reason for rejection in the provided field and click “Reject” to finalize the action.

    Payment:

    • Click the "Proceed to Pay" button to navigate back to the Order Summary & Payment Page. The account user, must click "Pay now" button to submit the request and generate the Order ID.

    • Once the payment is successful, the system redirects to the Orders Page, displaying all relevant order details.

    • The associated Order Actions and Quick Actions will also be available for further processing as shown below.

    Order Status  and Corresponding situations

    Order pending for parent approval & On Hold

    Explained above as part of approve sub account certificate request & On Hold status.

    Order Accepted

    • This status will be displayed once the order is placed by an account user.

    Order in progress

    • This status will be displayed when the order is in progress (i.e., Any of the action completed either from customer (or) eMudhra.

    Order Fulfilled

    • This status will be once the certificate request is approved by eMudhra.

    Order Cancelled

    • This status will be displayed when an account user cancels the certificate request.

    Order Rejected

    • This status will be displayed when customer rejects the certificate request.

    Sharing Order Status

    • Navigate to: Certificates> Orders> View Order page and Click on "Track Order" to open a modal, as shown below.

    Ways to track the order:

    You can track the order status using either of the following options:

    • Open URL: Click "Open URL" to open the track order page in a separate window, displaying the product verification process.

    • Share URL: Click "Share URL" to send the order tracking link to the Certificate Requester/Organization Representative.

    Cancel A Pending Certificate Order

    • Navigate to the Order Page:

    • Go to Certificates > Orders > View Order page.

    Initiate Order Cancellation:

    • Click on the Cancel Order button under the order actions.

    • A confirmation modal will appear as shown below.

    Provide Cancellation Remarks:

    • Enter the reason for cancellation in the Cancellation Remarks field.

    • Click on Cancel Order to confirm.

    What's Next?

    Upon order cancellation, the certificate request will no longer be processed. Account user will receive a refund for the cancelled order. They can go back to the Order View page to download a credit not associated with the cancelled order if they desire.

    Organizations

    Organizations Management Overview

    The Organizations Management section serves as the central hub for monitoring, managing, and maintaining information related to all organizations created within the system. It not only lists organizations with their statuses but also provides tools to update information, track key representatives, and manage approval workflows such as Extended Validation (EV) requests.

    This section ensures seamless governance by enabling administrators to keep organization records accurate and updated, making it easier to oversee operations and compliance.

    Features and Functionalities of Organizations Management

    Comprehensive Organization Listing

    All organizations created in the system are presented in a consolidated list.

    Each entry displays:

    • Organization Name

    • Unique Identifier (if applicable)

    • Status of the Organization (e.g., Active, Pending, or Suspended)

    • Date of Creation/Last Updated

    This overview allows users to quickly monitor the state of all organizations and take necessary actions.

    Manage Organization Information

    Select any organization from the list to edit or update key information, including:

    • Name, Address, and Legal Information

    • Contact Details

    • Organization Validity or Renewal Dates

    • Status Management: Administrators can activate, deactivate, or suspend organizations based on compliance requirements or internal policies.

    Keeping this information accurate ensures compliance with security and operational protocols.

    Organization Representative Management

    Each organization must designate primary and alternate representatives.

    • These representatives are responsible for interacting with the system and making formal requests (like certificate orders or EV validations).

    The Organization Representative Information section displays:

    • Name, Role, and Contact Information of the representatives

    • Access levels or permissions granted to them

    • Ability to edit or replace representatives when necessary

    Ensuring correct representative information guarantees smooth communication and process flows with the organization.

    Extended Validation (EV) Request Approvals

    Track and manage EV certificate requests for the selected organization.

    • EV certificates are used to establish higher trust levels, especially in public-facing applications.

    Admins can:

    • Approve, Reject, or Request Modifications to EV requests.

    • Track the status of each EV request (e.g., Pending, Approved, Rejected).

    • Ensure audit logs are maintained for each approval or rejection for future reference and compliance.

    This feature helps administrators enforce rigorous security practices for organizations requiring enhanced validation processes.

    Advanced Actions for Administrators:

    Export Organization Data:

    • Export the list of organizations along with their details for reporting or compliance purposes.

    Set Up Alerts and Notifications:

    • Configure alerts to receive notifications on status changes or upcoming renewals.

    • Automate notifications for EV request status updates to stay informed in real time.

    Audit Trail:

    • Access a history of changes and approvals for each organization to ensure accountability and transparency.

    • Log all modifications to representative information and EV requests for compliance auditing.

    OV Prevetting

    This helps enterprises to re-use organization details in the ordering form and quickly get the OV certificates with minimum verification requirements and customer pending actions.

    Navigate to Organizations > Add Organization

    • Enter the required Organization Information

    • Enter the Organization Representative Information

    • Upload the Organization Registration Documents and click on Submit for Validation

    The organization details verification will be pending with validation for OV. For details on OV validation process,.

    The Organization details are verified by the eMudhra validation team and approved.

    After the Organization verification, the Organization information can be re-used to order the certificate reverification of the organization details.

    Note: The OV Organization details is also verified while ordering a OV certificate. For details on ordering a OV certificate, please click here. The same organization details can be re-used for the subsequent OV orders.

    EV Prevetting

    Navigate to New Certificate > SSL/TLS Certificates > EV certificate

    For EV Organizations, user must verify the organization by ordering any EV certificate. For details on ordering a EV certificate, .

    The EV Organization details are verified by the eMudhra validation team and approved.

    In the Organizations page, the organization details verification will be pending with validation for as EV & OV.

    The same EV Organization details can be re-used for ordering a new EV or OV certificate as a pre-vetted organization.

    Note: Exclusive EV prevetting of organization is not available.

    click here
    click here