Xolphin Certificate Tool

Since it got more complicated for regular users to order signing certificates after most browsers removed the option, Xolphin now offers her own 'Xolphin Certificate Tool', to ease the ordering process for S/MIME and Code signing. The tool uses the same login credentials as used for regular access to our control panel, but requires a login with API or Admin privileges. This manual is based on version 2.0.1. These manual describes the functions in short, after which each step will be explained in detail.

The Xolphin Certificate Tool provides the following features:

Ordering

  • Order a single personal, company personal or company department S/MIME certificate (Issued by Sectigo)
  • Order a batch of company personal or company department S/MIME certificates (Issued by Sectigo)
  • Order a single Code Signing certificate (Issued by Sectigo)

Installing

  • Install a single S/MIME certificate via it's collection code(*)
  • Install a batch of S/MIME certificates via a list of collection codes(*)
  • Install a single Codesign certificate via it's collection code(*)

(*)After issuance of the certificate, a so-called collection link will be send to the subject of the certificate, the email address you have placed the order for. When placing a larger (batch) order, you need to collect all those unique links before you can download the related certificates for each user. A mail server rule can be practical for this.

Exporting

  • Export a keypair as PEM (cert & key) or PFX

Management

  • View certificate store contents without requiring the MMC
  • View pending requests placed previously with the tool

Installation

To use the Xolphin Certificate Tool, you first need to download the latest version and install it on your (Windows) workstation. The Xolphin Certificate Tool makes use of the Microsoft .Net 5 runtime enviroment, which is a separate additional install.

.Net Installation

  1. Download the latest .NET Desktop Runtime installer here.
  2. Double-click the downloaded windowsdesktop-runtime-**.exe file to start the installation
  3. Follow the installation instructions shown until it's finished.

Certificate Tool Installation

  1. Download the latest version from out Github repository, available at github.com
  2. Double-click the downloaded MSI file to start the installation
  3. After finishing the installation you can launch the Xolphin Certificate Tool from Windows start menu
  4. Your login details can now be set via Settings.

Ordering a single S/MIME certificate

  1. After launching the application, navigate to the Actions → Sectigo Email Signing (S/MIME) menu item
  2. Select Order Email Signing Certificate (Single Order)
  3. Make a selection from the drop-down menu for the product type you want to order:
    • Personal
    • Employee
    • Department
  4. Fill in the fields that can be edited for the product chosen
  5. Optional you can enter a purchase order number when your company required you to do so
  6. After all details are filled, you can click on the Order button to submit your request.

Ordering multiple S/MIME certificates

  1. After launching the application, navigate to the Actions → Sectigo Email Signing (S/MIME) menu item
  2. Select Order Email Signing Certificate (Multiple Batch)
  3. For Batch requests only the Corporate Signature is available and a CSV file can be used as input for names and email addresses
  4. Fill in the fields that can be edited for the product chosen
  5. Optional you can enter a purchase order number when your company required you to do so.
  6. After all details are filled, you can place your comma separated file containing the Full names and email addresses for all employees that you want to order a certificate for. Every line should be formatted like;
    First-name Last-name, email address
  7. click on the Order button to submit your request.

Ordering a single Code Signing certificate

  1. After launching the application, navigate to the Actions → Sectigo Email Signing (S/MIME) menu item
  2. Select Order Sectigo Code Signing
  3. Fill in the fields that can be edited for the product chosen
  4. Optional you can enter a purchase order number when your company required you to do so.
  5. After all details are filled, you can click on the Order button to submit your request.

Generate CSR and Private Key

  1. For products where only a public key and Common name is required, the Actions → Generate CSR and Private Key option can be used.
  2. Fill in the Company Name, Country Code (NL,BE....), and Common Name (www.yourdomain.tld or Firstname Lastname)
  3. Click Generate.
  4. Copy all CSR text so it can be used manually on the Xolphin order panel.

Install a single S/MIME certificate

  1. After launching the application, navigate to the Actions → Sectigo Email Signing (S/MIME) menu item
  2. Select Install Email Signing Certificate (Single Order)
  3. Enter the complete URL or just the collection code from the email announcing the issuance of your certificate
  4. Click install Certificate
  5. Your certificate can now be configured in your email client
  6. We urge you to create a backup for your key and certificate (see below)

Install multiple S/MIME certificates in batch

  1. After launching the application, navigate to the Actions → Sectigo Email Signing (S/MIME) menu item
  2. Select Install Email Signing Certificate (Multiple Batch)
  3. You can paste all collection codes in the URL/Codes field, each on their own line
  4. For easy distribution, select the Export all installed certificates to PFX files option
  5. Select the location where to place the created PFX files
  6. Set the password that you want to use for protecting the PFX

Remember to store the PFX files in a save place, remember the set password, and maybe remove the keys from your workstation after all users have their certificates installed.

Install new other than S/MIME certificates

This function requires only your account credentials to be set, and then tries to install all issued certificates found.

Export certificates

The Xolphin Certificate Tool allows to export certificates and key in different formats, currently PFX and PEM are supported.

  1. After launching the application, navigate to the Certificate Store → Current User → Personal or Certificate Store → Local Computer → Personal menu item, depending on the type of certificate you want to export. The Current User level contains certificates for the User, like email certificate, while the Local Computer level is used for server type certificates like SSL.
  2. Select the certificate from the list
  3. Navigate to the Actions → Export Certificate menu
  4. Select As PFX of As Base64 (PEM)... for the preferred export format.

Remember to store the PFX files in a save place, remember the set password, and maybe remove the keys from your workstation after all users have their certificates installed.

List unfinished requests

After launching the application, navigate to the Certificate Store → Pending Xolphin Orders menu item

Here you see what Xolphin related request are available, that not have completed the validation yet. As soon as the validation is completed and the certificate collected, the request is removed from this list. Ultimately you want this list to be empty.

SSLCheck

Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues

point up