DigiCert and GoGetSSL Code Signing token set up

Step 1: Please get your token ready and plug it into the machine.

1. Check if your eToken is blank or if it has the certificate preinstalled.
2. Go to your GoGetSSL account and navigate to your certificate’s Order details page.
3. Kindly choose the “I have received Token” option. Important! Please do not confirm it until the token is not delivered

Step 2: Download the DigiCert Hardware Certificate Installer AND SafeNet Authentication Client installers

Once the token receipt is confirmed, you will get the “Token setup instructions” reflected on the order page. Kindly download the DigiCert Hardware Certificate Installer AND SafeNet Authentication Client. Install both apps.

Step 3: Start the Code Signing installation on your eToken

Make sure that the token is plugged into the machine and open the DigiCert Hardware Certificate Installer

Step 4: Copy the Initialization code from the Order page and enter in the appropriate field in the DigiCert Hardware Certificate Installer

Enter the initialization code copied from the order page to the Initialization Code field.

Step 5: Confirm the token re-initialization

Select “Re-initialize my token” to delete existing certificates and keys. If you need to keep your current certificate on the eToken, leave the Re-initialize option unchecked. Please note, that the DigiCert eToken comes blank, so the certificate will be installed there only after initialization.

Step 6: Set up key information on the Key information page

The browser's SSL cache can be an issue. You have to try clearing the cache to resolve the error.

• For RSA key types, select RSA as the Key Type and 4096 as the Key Size.
• For ECC key types, select ECC as the Key Type and p-256 or p-384 as the Key Size.

Step 7: Configure token settings and set the eToken password

Create a Token Password (or eToken Password/ or token PIN) that will be prompted to access certificates on the eToken.

1. Add a Token Name to identify the eToken.
2. Create a Token Password (or eToken Password or token PIN) required to get them certificates on the eToken.

Step 8: Set the Administrator Password

On the Administrator Password page, you can keep the ‘Factory default admin password’ in case you don’t want to change it (recommended). If you have already set a new Administrator Password, uncheck the default option and enter the current password.

Step 9: Wait for certificate installation

On the Certificate Installation page, patiently wait for the process to complete. Creating an RSA 4096-bit key may take time.

Step 10: Finish and close the installer

Select “Close” to complete the installation when the process finishes.

Congratulations!

You can now use the code signing certificate on your eToken to sign the code. Now you can use the certificate on your eToken for code signing. You will need to enter the Token Password (set in step 7) to access the certificate. It is required to use the SafeNet Authentication Client to check the certificate/ sign the code.