InCommon Certificate Manager - SSL Certificate Creation

This article is intended for PSU faculty and staff that have a Secure Certificates subscription.

The purpose of this article is to provide step-by-step instructions on how to obtain certificates using the InCommon Certificate Manager.

1. Once your account is created visit https://cert-manager.com/customer/InCommon/ and at the login screen click the InCommon Federated Login button.  On the next screen select Penn State from the drop down and click the select button. After clicking select you will be redirected to the Penn State Web Access login screen and you can then login with your standard Penn State Access Account.  
        
   
   
2. Click the certificates tab and then click the Add button to create a certificate.
   
   
   
3. Select Manual creation of CSR and click Next.
   
   
   
4. On step 2 paste in the CSR that you generated for your certificate and click next.
   
   
   
5. On step 3 the organization, department, and common name fields will autofill. Select the drop down for the certificate profile that you'd like. In this example we will use InCommon SSL (SHA-2) (InCommon level). If you select InCommon Multi Domain SSL a DNS Names field will appear and list all of the subject alternative names from your CSR. The certificate term should auto select 1 year. For the external requestor field type the email address that you'd like the completed certificate notification to be delivered to. We recommend using a listserv or group email address to allow other folks to manage certificates because of staff changes, etc.
   
   
   
6. Once all of the fields are filled in click next.
   
   
   
7. On step 4 make sure auto renewal is unchecked and click ok. After a few seconds the certificate will appear in the main window. Click the checkbox to the left of the certificate common name and click the details button. In the details window click the select button next to where it says "Download The Certificate" and select the type of certificate that you'd like to download.
   
   
   
8. If you would like to revoke a certificate for any reason select the checkbox to the left of the certificate common name and then click the revoke button at the top.  You will be presented with a pop up box that asks for the revoke reason.  It is required that something is typed in this box so enter your revoke reason and click ok and the certificate will be revoked and the status will change to say revoked in red text.