• 
| •
|
|
The Division of Information manages an Enterprise PKI on behalf of the University
to issue Thawte security products, particularly SSL certificates for web servers
or other services.
LITSS can request a certificate online. Authorised staff in the Division of
Information will be notified of a new request and will check details before
issuing the certificate. Turn around for certificate issuing can be within a
few hours if necessary.
In order to generate a Certificate Signing Request (CSR) you will need to run
software on your server to create the private and public keys, and to include
information in the certificate about the ANU. You will need the following details,
which must be entered EXACTLY including case-exact.
| Country | AU |
| State/Province | Australian Capital Territory |
| Locality | Canberra |
| Organization | Australian National University |
Once you have generated your CSR proceed to the Registration Form. Paste in
your CSR in the appropriate field. Under payment method select "PKI Account"
and enter PKI code of "AUSNAT" - paying for Thawte products using
an ANU Purchasing Card is now possible. DOI can pay on behalf of the litss and
they will be contacted for a charge account for cost recovery or they can ask
DOI to have the purchase charged direct to their purchasing card. The cost of
an SSL certificate under the Enterprise PKI is US$186.75 per year (see Enterprise
PKI Pricing for current prices - other prices listed in various places on the
Thawte site are for single certificate issue).
The Division of Information does not accept any liability for costs if you request
a certificate that does not work. If you are unsure, use the test facility first.
Make sure you back up your private keys (multiple floppies or CD-R strongly
encouraged) and keep them in a safe place - the Division of Information will
be more than happy to hold a copy in trust for you. You will need to backup
the private key files and also your pass-phrase in hard-copy.
