Installation GlobalSign PDF signature

This manual applies to Windows XP (SP2) or higher.

The PDF certificate is delivered in two parts:

  • The certificate can be downloaded through an email you will receive from GlobalSign. This requires a pick-up password which you will receive from Xolphin.
  • You will receive postal mail from GlobalSign containing the iKey 400 on which you will save the certificate. For use of this USB token, GlobalSign will include the needed software and drivers.

The installation consists of the following steps:

  1. Adjust your browser settings
  2. Install drivers for the USB token
  3. Initializing the token
  4. Save the certificate on the USB token

Before you Start: System requirements

Software:

  • Windows XP Professional (SP 2) or higher.
  • Microsoft Internet Explorer v5.5 SP2 or higher (We advise to use Internet Explorer because it uses the Windows Certificate Store and ActiveX, unlike other browsers).

Hardware requirements for the SafeNet iKey USB Token:

  • One available USB port for the USB iKey token
  • a minimum of 128MB RAM

The products of Adobe are often used to sign PDF documents. Listed below are the requirements for Acrobat and Acrobat Reader:

It is also possible to use other software to sign PDF documents. For software requirements, please refer to the website of the supplier of that software.

Adjusting your Browser Settings

Because of the security settings used by Microsoft in Internet Explorer, you have to ensure all steps are completed before installing your certificate. If you skip a step, an error may occur during the completion of the installation, which means you will have to start the entire process over again. The reason for having to make these adjustments is that ActiveX Object is used for the installation. Using the standard settings, Internet Explorer does not allow Active Object to connect with the GlobalSign websites.

  1. Open Internet Explorer.
  2. Go to ToolsInternet OptionsSecurity Tab.
  3. Click on Trusted Sites and then on the Sites button. Installeren GlobalSign PDF Handtekening
  4. When the Trusted Sites window opens, add:
    • https://system.globalsign.com
    • https://systemeu.globalsign.com
    Installeren GlobalSign PDF Handtekening
  5. Adjust the Security Level to Low. Click on Apply to confirm. Installeren GlobalSign PDF Handtekening

Installing Drivers for the USB Token

  1. To use the iKey, you have to install the SafeNet Authentication Client.
  2. Download the software.
  3. Note: During the installation (in the fourth window), select Bsec-compatible to install all necessary drivers. Installen GlobalSign PDF Handtekening
  4. As soon as the installation is completed, the SafeNet logo will be shown on your taskbar:
    Installen GlobalSign PDF Handtekening

Initialize Token

Note: This step must be performed for all iKey tokens before installing the GlobalSign PDF Signing Certificate.

  1. Insert the SafeNet USB token in an available USB port.
  2. Go to the Start menuProgramsSafeNetSafeNet Authentication Client. The following window will appear.
  3. Click on the Advanced View gear icon. Installen GlobalSign PDF Handtekening
  4. Click on the token with your right mouse button, and select Initialize Token...Installen GlobalSign PDF Handtekening
  5. Select Configure all initialization settings and policies.. Token initialiseren
  6. The following window appears. Fill in a name for the token. The token name is a friendly name that is used for authentication purposes, it has no influence on the signature. Also set a password for the token. This password will be used to install the certificate, and each time a document is signed. De-select the option for Token password must be changed on first logon. Click on Finish when you're ready. Token initialiseren
  7. A notification now says the initialization process will erase the contents of the token. Click on the OK button. Token initialiseren
  8. The initialization of the token will now start. This process might take a few moments. Installen GlobalSign PDF Handtekening
  9. After the completion of the initialization, a message will appear, stating that the token was initialized successfully. Click on the OK button. Installen GlobalSign PDF Handtekening
  10. Note: If you have installed the PDF Signature, you have to ensure the root and intermediate certificates have been installed on the token as well, as shown here below CA Certificates. GlobalSign PDF Signing 18.png

Save Certificate on a USB Token

  1. Go to the Certificate Download Ready email from no_reply@globalsign.com containing the instruction Pickup & Install Your Certificate. Click on the link in the e-mail, or copy/paste it in your internet browser in its entirety. Installen GlobalSign PDF Handtekening
  2. Enter your Pickup Password. You will have received this by email from Xolphin, directly after finishing your application. Click on NextInstallen GlobalSign PDF Handtekening
  3. If an Active X control window opens, click on Yes or Allow to continue the installation process. The Cryptographic Service Provider (this takes care of the encryption and certificate management in Windows) will be added as a SafeNet RSA CSP or eToken Base Cryptographic Service Provider. Click on Next.
  4. Click to check the box indicating you accept the GlobalSign Subscriber Agreement. Click on Next.
  5. Accept the Web Access ConfirmationCertificaat opslaan
  6. Log onto the USB token with the passphrase you set during the initialization process of the token (step 6 in the section Initializing Token of this manual). After clicking on Next it might take a while to log in, please do not close your browser. Installen GlobalSign PDF Handtekening
  7. Click on Install my Certificate
  8. If an Active X window appears, please click on Yes or Allow.
  9. Click onYes at the Web Access Confirmation PromptCertificaat opslaan
  10. Click on Yes to import the Certificate Chain.
  11. Upon completing the process you will be shown the following confirmation: Installation Success, click on OK.
    Note: If you have installed the PDF Signature, you will have to make sure the root and intermediate certificates have been installed on the token as well.

All necessary steps to install your web server certificate have now been completed. Keep the USB token at a same location, it is unfortunately not possible to get a free reissue of this certificate. Please remember the passphrase of the token well.

Please do not hesitate to contact us if you encounter problems or error messages, we are happy to help!

SSLCheck

Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues