ADMINISTRATOR GUIDE. Signing Portal for Publisher

Transcription

1 ADMINISTRATOR GUIDE for Publisher January 2008

2 1 Overview Developer Enrollment Overview Enrollment Request GeoCenter Customize Portal s Encoding Issue Administrator Certificates Overview Start registration Invite Subscriber Enrollment & Certificate Install Manage Administrator Certificates Enrollment Order Status Quick Search Buy More Download Certificate Revoke Administrator Certificate Download CRL Reports Detail Report Renewal Report Summary Report Audit Report Signing Services Signing Set Upload File Sign Download File Delete File Cancel Sign Quick Search find a Signing Set Reports Buy More Signing Events GeoTrust, Inc. 2

3 1 Overview Welcome to the (SP) for Publisher guide. The is a fully managed code signing service that can support publisher efforts to deploy applications signed with one-time-use certificates, such as applications for mobile devices. The SP may be used to sign applications for multiple devices, multiple networks, and multiple application types. The SP supports multiple developers with a single publisher account. The allows publishers to effortlessly upload and maintain applications files, request test and production signings, and download signed applications using a simple web interface. The following list identifies the standard features of the : Create and maintain a signing set for each application Upload application files to a signing set Delete application files from a signing set Submit an application for testing prior to digital signing Sign application with a test or production code signing certificate Download signed application Enroll other developers for access to the publisher s account 2007 GeoTrust, Inc. 3

4 2 Developer Enrollment 2.1 Overview Before you can start managing your applications for your Organization, you must first obtain an Administrator Certificate. 2.2 Enrollment Request Your organization s initial Administrator certificate invitation will be ed to the Administrator identified at service sign-up. A USB token may also be shipped to the Administrator if required for the selected service. Some signing services require a USB token. The Administrator, acting on behalf of the Organization, will need the PIN established at service set-up to complete the enrollment process. Additional Administrators may be enrolled by the initial Administrator through the GeoCenter management application. NOTE: You must use Internet Explorer when obtaining your Administrator certificate, and popups must be enabled. Vista is not currently supported. To install the initial Administrator certificate in your browser: Step 1 Open the invitation sent to the Administrator and click on the Enrollment URL provided in the body of the message. You must use the Internet Explorer browser to enroll for your Administrator certificate. Make sure pop-ups are enabled. Step 2 Fill out the enrollment form by entering the address and PIN established at service set-up. Review and accept the Subscriber Agreement, and Click Continue Step 3 Subsequent to successful authentication, generate the certificate key pair and certificate request using the default Microsoft Enhanced Cryptographic Provider v1.0. Some security-related popup dialogues may be displayed click on Yes. Step 4 The Administrator certificate is generated and automatically installed in your browser. To install the initial Administrator certificate on a USB token: Step 1 Ensure you are ready: a) Have access to the internet to acquire the necessary drivers and obtain the Administrator certificate b) Close out all non-essential applications, EXCEPT your browser and , prior to starting the process since you will be prompted to re-boot your computer. Remove all tokens and smartcards from your workstation GeoTrust, Inc. 4

5 c) Have your ikey USB token available d) Establish a passphrase that will be used to protect your certificate stored on the token. We recommend selecting an eight (8) mixed character password (please note that passphrases are case sensitive). You will need to remember this passphrase each time you use your Administrator certificate e) Have the one-time user Enrollment PIN that you established at registration available. To pick up your certificate, you will need your Enrollment PIN. Step 2 Step 3 Step 4 Step 5 Step 6 Install the USB token drivers: a) Go to : b) When the File Download box opens, click Save. c) Start the installation by double-clicking on the Crypto Token installation icon. d) Follow the InstallShield Wizard instructions, accepting all default actions e) When the Wizard completes, select to restart the computer. Reset your token password. Your token is delivered to you with a default password preset to PASSWORD (in all caps). We recommend changing this password to a combination of at least eight (8) mixed characters. a) Go to your "Start" button, select "All Programs", then "GeoTrust Token", then "ikey 2000 Series Software", and "PassPhrase Utility" b) Select the "Update Password" button to change the password c) Reset your password Open the invitation sent to the Administrator and click on the Enrollment URL provided in the body of the message. You must use the Internet Explorer browser to enroll for your Administrator certificate. Make sure pop-ups are enabled. Fill out the enrollment form by entering the address and PIN established at service set-up (not your token Password). Review and accept the Subscriber Agreement, and Click Continue The key pair and certificate are generated and automatically installed. It may take between 2-5 minutes to complete the necessary cryptographic functions and it is important that you do not disrupt the process. If for some reason the process is interrupted, then simply start restart at Step 4. Some security-related popup dialogues may be displayed click on 2007 GeoTrust, Inc. 5

6 Step 7 Yes. Enter your token password when prompted GeoTrust, Inc. 6

7 3 GeoCenter GeoCenter is the secure portal for application management and account administration. Administrators can perform all application management tasks within GeoCenter. Administrators can access the GeoCenter secure Portal at this URL: Access to GeoCenter is controlled through Administrator certificates. Make sure you select your Administrator certificate when prompted to select a certificate when starting a new session with GeoCenter. GeoCenter is navigated by selecting one of the tabs at the top of the page, and then selecting a function on the left. Tabs are provided for enabled services. The content of the list of functions depends on the selected tab. The following tabs will be displayed in GeoCenter for a Publisher account: Signing Services This section of GeoCenter is dedicated to uploading, signing, and downloading signed applications. Admin Services This section of GeoCenter is dedicated to purchasing, requesting and managing Administrator certificates for your account. Resource Center This section is where we will post important messages, updated documents, product tips, special promotions and other items of relevance. The rest of this document will provide guidance in the use of these tabs GeoTrust, Inc. 7

8 4 Customize Portal Prior to inviting other Developers to your SP account, we recommend that you review and customize your service. Select the Admin Services tab to customize s associated with administrator enrollments s Administrators can customize the messages that are delivered in conjunction with certificate enrollment, delivery, and renewal. Default messages are provided, so this step is optional. The standard messages that can be customized are: s sent to Administrators: o Admin Invitation this message will be sent to new Administrators after the Administrator has registered the end user via the Request function. Since new Administrators are pre-approved in this model, they will receive their certificate in a single session, assuming they authenticate successfully with the PIN you provide in an out-of-band method. o Renewal Notice: this message may be sent to an Administrator many times prior to the Administrator s certificate expiring. Administrators can customize the subject lines and message contents, including the capability to localize the content to a different language. Administrators can selectively enable or disable the sending of specific messages. NOTE: Enabling or disabling the sending of a specific message affects all language options for the selected message. To modify the message body or Subject line: Step 1 Click on Customize-> s in the left navigation menu: Step 2 Select the language from the pull down menu. Step 3 Click on the View/Edit button for the type you want to customize Step 4 Modify the Subject or Message text Step 5 Click on Update. This will save the modified text. In addition to static text, you can also use tokens for dynamic content in the subject or message text. These tokens will be replaced by their appropriate values when the is created. The following list identifies tokens available for the message text: <enrollmenturl> = URL for Subscriber enrollment <gctradminurl> = URL for GeoCenter <OrderID> = Order/Enrollment ID 2007 GeoTrust, Inc. 8

9 <DaysUntilExpiration> = Days until certificate expires <SubjectCN> = Common Name from certificate s Subject field <IssuerCN> = Common Name from certificate s Issuer field <CertSerialNum> = Certificate Serial Number <RenewalURLClientAuth> = URL for renewing a certificate via client authentication <RenewalURL> = URL for renewing a certificate without client authentication The following list identifies the tokens available for the subject line of the <OrderID> To support a new language option: follow the same steps as above, selecting the language for the new language. To revert the content back to the default subject line and message body: Step 1 Click on Customize-> s in the left navigation menu: Step 2 Select the language from the pull down menu. Step 3 Click on the View/Edit button for the type you want to customize Step 4 Click on the Show Default button. Step 5 Click on Update. This will save the default text. To disable the sending of an type: Step 1 Click on Customize-> s in the left navigation menu: Step 2 Click on the Disable radio button for the type you want to disable. This will disable the for all languages Encoding You can set the encoding to use for a selected language. The encoding will be used for all messages configured for the selected language. To set an encoding: Step 1 Click on Customize-> Encoding in the left navigation menu: Step 2 Find the language and select the encoding from the pulldown to the right of the language Step 3 Click on Update GeoTrust, Inc. 9

10 5 Issue Administrator Certificates You have the capability to issue Administrator certificates to other Developers. The Admin Services tab is used to issue certificates to Administrators. 5.1 Overview The Request enrollment method provides Administrators the capability to register approved Developers by entering data that will be used to authenticate the Developer and used to populate the Developer s certificate. This method has the following benefits: ensures the Developer s certificate will contain the correct information, and Developer receives certificate in one step In the rest of this section, the term Subscriber refers to a Developer. Request Enrollment Flow: Subscriber SP Administrator 1. Login into GeoCenter and register Subscriber. 3. Click on Enrollment URL in and enter authentication data. 2. Invite sent to Subscriber 4. Submitter Authenticated, Certificate Generated and Downloaded 5. Certificate Installed automatically 2007 GeoTrust, Inc. 10

11 5.2 Start registration To start the registration process: click on Request in the left navigation menu. At the top of the page is a display of the current certificate balance. The balance indicates the number of certificates that have been purchased, the number that have been used or issued, and the number that are remaining. The profile field identifies the configuration set that determines what enrollment fields are displayed, as well as the structure and content of the generated certificates. To register a Subscriber: Step 1 Enter the data that will be used to populate the certificate (e.g. First Name, Last Name, etc.) and to authenticate the request (e.g. , PIN, etc.). Fields marked with an asterisk (*) require input. Fields marked with the letter A are used to authenticate the request. Clicking on the Generate PIN button will generate a random PIN for you. Step 2 Click on the Continue button when all data is entered. The Administrator should contact each Subscriber they have Registered and provide them with the PIN number used to register the client certificate. This should be done over the phone, or in another out-of-band format to reduce the likelihood of the PIN number being compromised. 5.3 Invite The Subscriber will receive an auto-generated from their Administrator inviting them to enroll for an Administrator certificate. The Subscriber will click the enrollment URL in the to start the enrollment process. 5.4 Subscriber Enrollment & Certificate Install The Subscriber must enter data necessary to automatically authenticate the request (e.g. the Address and the PIN number that was provided to them out-of-band) and then click Submit. The system will then authenticate the request. Assuming the request passed authentication, the Subscriber will be alerted that a website is requesting a new certificate on their behalf. This is being done by the SP and is necessary to generate the user s client certificate. The Subscriber should click yes. The Subscriber will be prompted to select the Cryptographic Service Provider. The Cryptographic Service Provider will generate and maintain the keys associated with the certificate, as well as maintain the certificate. Once the keys are generated by the Cryptographic Service Provider, a CSR is created automatically and sent to SP to have the certificate generated. Once the certificate is generated, it will be automatically downloaded and installed GeoTrust, Inc. 11

12 6 Manage Administrator Certificates GeoCenter provides functions for managing certificates. The Admin Services tab is used to manage Administrator certificates. 6.1 Enrollment Order Status An order for a certificate may advance through several states, and may depend on the result of the authentication. The following table identifies the different states and what they mean. State Description ORDER_COMPLETE certificate was issued and delivered. ORDER_CANCELLED admin cancelled the invite prior to authentication ORDER_INIT admin sent enrollment invite to client AUTH_FAILED system failed to match invite enrollee's entries with admin's invite entries AUTH_COMPLETE system matched invite enrollee's entries with admin's invite entries AUTH_LOCKED invite enrollee has failed authentication the max allowed times GENERATED Certificate was issued, but not yet picked up by subscriber 6.2 Quick Search Quick Search provides the capability to find a specific certificate or a collection of certificates based on a search criteria that you define. You can search for certificates or enrollments by their characteristics. The options are: find all certificates or enrollments that contain the specified Subject DN find all certificates that contain the specified text in the Subject DN Enrollment Status find all certificates that have the selected status To find certificates that have certain characteristics: Step 1 Click the button next to Search by one or more of the following Step 2 Click the box for the characteristic and enter or select value Step 3 Click on the Continue button. To find a specific certificate: Step 1 Click the button next to Certificate Serial Number Step 2 Enter the serial number in the associated entry field Step 3 Click on the Continue button GeoTrust, Inc. 12

13 To find a specific enrollment: Step 1 Click the button next to Enrollment ID Step 2 Enter the enrollment ID in the associated entry field Step 3 Click on the Continue button. The resulting report will contain a row for each enrollment that meets the selected search criteria. You can click on an Enrollment ID to display detailed information on that enrollment, and to take an action on the enrollment or certificate. The following actions are available on enrollments: Update Profile Values allows you to modify the data entered with the enrollment. This may be necessary to correct typos or to update data entered by a subscriber. Re-send Invitation allows you to re-send the invitation after updating the profile field values, or if the original Invitation was not received, or if the authentication attempts count was cleared. Re-send Pickup allows you to re-send the Pickup if the original Pickup was not received. Clear Attempts Count an enrollment is locked when the number of authentication attempts has reached a limit (typically 5). The admin should investigate, and if not deemed an attack then the admin can unlock the enrollment by clearing the attempts count. The admin may need to update the profile field values if the authentication was failing due to a typo in the enrollment data, and then re-send the Invitation . Cancel Order Enrollments initiated by an Admin Request can be cancelled by the Admin prior to the subscriber enrolling for their certificate. Enrollments received via the Portal URL can be cancelled prior to the submitter picking up the certificate. The following actions are available on certificates: Revoke Certificate allows you to revoke a certificate, making it inactive. Download Certificate allows you to download a copy of the certificate. Send Renewal Notice allows you to manually send a renewal notice to the Subscriber. 6.3 Buy More GeoCenter provides the capability for you to order more certificates and tokens online. To order more certificates or tokens: Step 1 Select the products you would like to order, or indicate a custom order. Also specify quantity Step 2 Depending on the type of order, you may need to enter payment information Step 3 Enter shipping address if a token is ordered 2007 GeoTrust, Inc. 13

14 Step 4 Review your order and click on Submit You will be able to issue the new certificates as soon as your order is approved. An will be sent to you when the order is approved. 6.4 Download Certificate GeoCenter provides the capability to download a certificate. To Download a Certificate: Step 1 Click on Download Certs in the left navigation menu or on the Manage Certificates page Step 2 Enter your search criteria for the certificate you want to download and click on Continue Step 3 Click on the Enrollment ID associated with the desired certificate Step 4 Click on Download Certificate to download the certificate in a.cer file. 6.5 Revoke Administrator Certificate To Revoke an Administrator Certificate: Step 1 Click on Revoke Cert in the left navigation menu or on the Manage Certificates page Step 2 Enter your search criteria for the certificate you want to revoke and click on Continue Step 3 Click on the Enrollment ID associated with the desired certificate Step 4 Click on Revoke Certificate. This causes a popup to appear, asking you to confirm the revoke action Step 5 Click on OK. NOTE: Once a certificate is revoked, it cannot be undone, so care must be exercised when revoking certificates. 6.6 Download CRL Revoked certificates are identified in a Certification Revocation List (CRL). A CRL is updated whenever a certificate is revoked. GeoCenter provides the capability to download a CRL, so that it can be used with any application that supports CRL checking (e.g. access control). To download a CRL: 2007 GeoTrust, Inc. 14

15 Step 1 Click on Download CRL in the left navigation menu or on the Manage Certificates page. Step 2 Click on the URL to initiate the download GeoTrust, Inc. 15

16 6.7 Reports The Administrator can run and query reports for all activity within their service. The Admin Services tab provides reports for Administrator certificates and activities. To Create a Report: Step 1 Select the Report Type from the Left Navigation Menu or the Certificate Reports page Step 2 Specify the Date Range Step 3 Select the Profiles you want included in the Report Step 4 With a Detail Report, you have the option to include Certificate Details in the Report. Click on Continue. Step 4 Specify the criteria for selecting enrollments and certificates for the Report, and then click on Continue. Step 5 View Report online with the option to Download Detail Report The Detail Report provides detailed data for every client certificate requested. The Report includes the following values for each request: Enrollment ID Date Ordered Date Completed Enrollment Status Renewed Status Address Product Type Price Validity Period If a certificate has been generated for the request, then the report also has values for the following: Certificate Serial Number Common Name from Certificate Subject field The administrator also has the option of including certificate details in the report. The certificate details include the fields in the Subject DN GeoTrust, Inc. 16

17 The administrator has the capability to select the contents of the report by specifying a date range. The date range will be used by selecting only those requests that were initiated within the date range. The administrator can also tailor the report to select a single certificate by specifying a certificate serial number, or to include a single enrollment by specifying an enrollment identifier. The administrator can choose requests based on: containing a specified value Subject DN containing a specified value Enrollment Status Certificate Profile Once the report is created, the administrator has the capability to download the report in CSV, Excel, or XML format. If the administrator wants to view all the details of a request included in the report, the administrator can click on the associated Enrollment ID Renewal Report The Renewal Report can help identify certificates that may expire soon and should be renewed. The administrator selects the certificates to include in the report by specifying a date range. Any certificates expiring within the specified date range will be included in the report. The Renewal Report includes the following values for each selected certificate: Enrollment ID Certificate Serial Number Valid From Date Valid To Date Product If the certificate has already been renewed, then the report includes the following values: Renewal Enrollment ID Valid From Date Valid To Date The administrator has the capability to filter the report by selecting a certificate profile. Once the report is created, the administrator has the capability to download the report in CSV, Excel, or XML format. If the administrator wants to view all the details of a request included in the report, the administrator can click on the associated Enrollment ID 2007 GeoTrust, Inc. 17

18 6.7.3 Summary Report This report provides summary information about the enrollments, and can be used for trend analysis to determine how to optimize the provisioning process. The Report includes the following data for each product: Enrollments Requested Enrollments Cancelled Authentication Passed Authentication Failed Certificates Delivered Certificates Revoked Certificates Renewed The administrator has the capability to select the contents of the report by specifying a date range. The date range will be used by selecting only those requests that were initiated within the date range. Once the report is created, the administrator has the capability to download the report in CSV, Excel, or XML format Audit Report The Audit Report is only available in the Admin Services tab. The Audit Report provides detailed data for each event initiated by an Admin, Subscriber, or the System. The Report includes the following values for each event: Record ID Event Time Event Type Admin Product The administrator has the capability to select the contents of the report by specifying a date range. The date range is used to select only those events that occurred within the date range. The administrator can filter the report to select events for a single order by specifying an order or enrollment identifier. The administrator can filter the report to select events for a specific certificate by specifying the certificate serial number. The administrator can choose events based on: Event Type Administrator Product Type Profile Once the report is created, the administrator has the capability to download the report in CSV, Excel, or XML format GeoTrust, Inc. 18

19 If the administrator wants to view all the details of an event included in the report, the administrator can click on the associated Event ID GeoTrust, Inc. 19

20 7 Signing Services The Signing Services tab provides the capability to centrally manage the process of application signing. This section describes how to use the functionality in the Signing Services tab. The general process associated with the signing of an application is described by the following steps: 1. Developer signs application locally with their Administrator certificate (required for Windows Mobile signing services) 2. Developer accesses their signing account via GeoCenter 3. Developer creates new signing set 4. Developer uploads application files 5. Developer selects test signing service 6. SP validates files in signing set 7. SP signs application with test code signing cert 8. Developer downloads signed application 9. Developer tests application locally 10. Developer accesses their signing account 11. Developer selects existing signing set 12. Developer selects production signing service 13. SP validates files in signing set 14. SP validates Developer has enough signing events 15. SP sends application to Provider for review and/or test 16. Provider approves or rejects application 17. If application was approved, SP signs application with production code signing certificate 18. Developer downloads signed application 19. Developer distributes signed application NOTE 1: Developer may repeat steps 1-9 until testing is successful, re-using the same signing set NOTE 2: Developer may skip steps 5-11 NOTE 3: Steps 15 & 16 may not be required for a particular signing service NOTE 4: No test signing service is currently available for Windows Mobile The rest of this section identifies how a Developer uses the Signing Services tab in GeoCenter to sign and maintain applications. 7.1 Signing Set A Signing Set is a container for all the files associated with a version of an application that will be signed. The Signing Set may contain executable files and non-executable files (e.g. readme files). A Signing Set will have one of the following states: 2007 GeoTrust, Inc. 20

21 Initialized Signing Set created, may or may not have files Signing Requested Signing is requested, testing is not required, not yet signed Testing Requested Signing Set is assigned to a Provider or a Test House Testing In Progress Provider or Test House has downloaded application for testing Testing Passed Signing Set has passed the testing required for production code signing, but not yet signed Signed Signing Set has been successfully signed with a Production code signing certificate. Signing with a test certificate does not affect the status of the signing set. Testing Failed Signing Set did not pass testing A Signing Set is created via the Upload function. An existing Signing Set can be accessed using the Upload function or via the Quick Search function. A Developer will be able to modify the contents of a Signing Set until the application is signed with a Production signing service. After the application is signed with a Production signing service, the Signing Set is considered closed, and the only allowed action is Download File. 7.2 Upload File A Developer will be able to upload files to a signing set To Upload a file to a new Signing Set: Step 1 Click on Upload in the Left Navigation Menu Step 2 Select Upload file to a new signing set Step 3 Enter the Application Name and a Version Identifier Step 4 Select the Production-version of the Signing Service that will be used to sign the application, and click on Continue. Step 5 Use the browse capability to identify the file to be uploaded. A zip file can be used to upload multiple files with a single action. Click on Submit when ready. Step 6 SP will upload the files and they will be listed in the Files section. If a zip file is uploaded, the individual files will be extracted. To Upload a file to an existing signing set: Step 1 Click on Upload in the Left Navigation Menu Step 2 Select Upload file to an existing signing set and click on Continue. This will result in the display of the Quick Search page. Step 3 Select and specify the Signing Set ID, or select and specify the Search Criteria. Click on Continue. Step 4 A report identifying all the Signing Sets that meet the Search Criteria is displayed. Step 5 Click on the Signing Set ID of the desired Signing Set. The Signing Set Details page is displayed. Step 6 Click on the Upload button Step 7 Use the browse capability to identify the file to be uploaded. A zip file 2007 GeoTrust, Inc. 21

22 can be used to upload multiple files with a single action. Click on Submit when ready. Step 8 SP will upload the files and they will be listed in the Files section. If a zip file is uploaded, SP will extract the files. 7.3 Sign A Developer will be able to submit a request to have an application or file signed. To request a signing of an application or file: Step 1 Access the Signing Set Details page Step 2 Select the files to sign by clicking on the check boxes next to the files. A.cab file must be selected for a Windows Mobile signing service. A.jar and.jad file must be selected for a Java Mobile signing service. A.sis file must be selected for a Symbian signing service. Step 3 Click on the Sign button Step 4 The balance of your Signing Events and a pulldown for selecting a Test or a Production Signing Service is displayed. Select a Signing Service and click on Submit. Step 5 Depending on the selected Signing Service, you may be notified that your application has been submitted for testing. Step 6 If testing is successful or not required, the selected files or application will be signed, and the status of each signed file or application will be updated to indicate it was signed by a Production certificate or signed by a Test certificate. The certificate used to sign will be listed in the Certificate Info section of the Signing Set Details page. 7.4 Download File A Developer will be able to download a file from a Signing Set. To download a file: Step 1 Access the Signing Set Details page Step 2 Select the files to download by clicking on the check boxes next to the files Step 3 Click on the Download button Step 4 The selected files will be delivered in a zip file. 7.5 Delete File A Developer will be able to delete a file from a Signing Set GeoTrust, Inc. 22

23 To delete a file: Step 1 Access the Signing Set Details page Step 2 Select the files to delete by clicking on the check boxes next to the files Step 3 Click on the Delete button Step 4 The deleted files are no longer displayed in the list of files 7.6 Cancel Sign A Developer will be able to cancel a signing request. To cancel a signing request: Step 1 Access the Signing Set Details page Step 2 Click on the Cancel Sign button 7.7 Quick Search find a Signing Set A Developer may use the Quick Search function to access a Signing Set To delete a file: Step 1 Click on Quick Search in Left Navigation Menu Step 2 Select and specify the Signing Set ID, or select and specify the Search Criteria Step 3 Click on the Continue button Step 4 A report identifying all the Signing Sets that meet the Search Criteria is displayed. This report may be exported by right-clicking on one of the Export options and selecting the Save Target As option. Step 5 Click on the Signing Set ID of the desired Signing Set. The Signing Set Details page is displayed. 7.8 Reports A Developer can create a report for signing sets created within a specified time period. To Create a Report: Step 1 Click on Report in the Left Navigation Menu Step 2 Specify the Date Range and click on Continue. This will display the Search Criteria page. Step 3 Specify the Signing Set ID, or select and specify the Search Criteria Step 4 A report is displayed identifying all the Signing Sets that meet the Search Criteria and were created within the specified date range. This report may be exported by right-clicking on one of the Export options and selecting the Save Target As option GeoTrust, Inc. 23

24 7.9 Buy More Signing Events A Signing Event may be consumed each time a file is signed via a Production signing service. The balance of Signing Events in your account is displayed when a Sign function is initiated, and also when the Buy More function is initiated. A Developer can replenish the number of signing events via the Buy More function. To View Signing Event Balance: Step 1 Click on Buy More in the Left Navigation Menu Step 2 The Signing Event balance is displayed, showing the number of signing events purchased, the number used, and the number remaining. To Obtain more Signing Events: Step 1 Click on Buy More in the Left Navigation Menu Step 2 Select the product associated with the number of signing events you would like to add to your account, or select Custom if you have an agreement in place for a specify quantity and price. Then click on Continue. Step 3 Depending on the type of order, you may need to enter payment information Step 4 Review your order and click on Submit 2007 GeoTrust, Inc. 24