Cert Update 0729
-
Upload
reshma-banu -
Category
Documents
-
view
226 -
download
0
Transcript of Cert Update 0729
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 1/24
Intuit PSD SSL Certificate Changes
On July 26, 2010, at 11:00pm PST, Intuit PSD will be updating SSL certificates on some of its
payment processing servers. The servers affected will be those with URLs starting with
https://wwws.echo‐inc.com. Some merchants who have custom applications that utilize services on
these servers may be affected and will need to download and install the latest SSL certificates. Whether
or not the merchant will need to manually install the new certificates depends largely on how the client
application is designed.
If you find it necessary to manually install the new certificates, you can download the
certificates by following the steps below. (The steps for installing the downloaded certificates will
depend on the application. Please consult your IT department or software vendor for more information
about updating SSL certificates):
If you
have
questions
or
need
assistance
with
this
process
please
contact
Customer
Support
at
1‐800
‐
262‐3246. We are open 24 hours a day to serve you. If you have an account manager please contact
them directly.
Thank you for your immediate attention to this matter.
(1) In Internet Explorer, enter the following URL:
https://wwws.echo‐inc.com/
NOTE: The screen captures presented below are for illustrative purposes only and may or may not
represent the actual screens merchants will see.
(2) Click on the yellow lock next to the URL:
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 2/24
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 3/24
(3) Click on the “View certificates” link.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 4/24
(4) Click on the “Details” tab.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 5/24
(5) Click the “Copy to File…” button.
(6) Click the “Next” button.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 6/24
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 7/24
(7) Make sure “DER encoded binary X.509 (.CER)” is selected and click the “Next” button.
(8) Find a directory to save the certificate and give it a name (e.g. IntuiPSD.CER).
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 8/24
(9) Click the “Finish” button.
(10) Click the “Finish” button.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 9/24
The intermediate CA certificate will also be changing. Follow the steps below to download the
intermediate CA certificate.
(1) From the “Certificate” popup window which was opening in the steps above, click the
“Certificate Path” tab.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 10/24
(2) Select the “Verisign Class 3 Secure Server CA – G2” certificate and click the “View Certificate”
button.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 11/24
(3) Click the “Details” tab.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 12/24
(4) Click the “Copy to File…” button.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 13/24
(5) Click the “Next” button.
(6) Make sure “DER encoded binary X.509 (.CER)” is selected and click the “Next” button.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 14/24
(7) Find a directory to save the certificate and give it a name (e.g. IntuiPSD‐Inter.CER).
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 15/24
(8) Click the “Next” button.
(9) Click the “Finish” button. At this point, you should have both two certificates (IntuitPSD.cer and
IntuitPSD‐Inter.cer) downloaded to your disk.
Manually updating the certificates in your application will vary depending on the application and
language in which it was coded.
If the application is written in Java, the certificates can be loaded into your JVM by using the keytool.
/opt/java/jre1.5.0_18/bin/keytool -alias IntuitPSD -import –keystore \
/opt/java/jre1.5.0_18/lib/security/cacerts -trustcacerts \
-file IntuitPSD.cer
/opt/java/jre1.5.0_18/bin/keytool -alias IntuitPSD-Inter \
-import –keystore /opt/java/jre1.5.0_18/lib/security/cacerts \
-trustcacerts -file IntuitPSD-Intuit.cer
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 16/24
For more information about using keytool, see
http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html
If the application is written a Windows based technology (not Java), then the certificates can be
loaded into the computer account using the Microsoft Management Console ‘Certificates’ Snap‐in.
Managing a Computer's Certificates
The Certificates MMC snap‐in can be used to manage a computer's certificates.
1. Start the MMC by clicking Run on the Start menu. Then type in mmc.exe in the text box and click
OK.
2. On the Console menu, click Add/Remove Snap‐in.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 17/24
3. Click Add to add a snap‐in to the current console.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 18/24
4. Select ‘Certificates’ and then click Add.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 19/24
5. Select the Computer account option and then click Next.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 20/24
6. Select Local computer if managing certificates on the local machine the application runs on; if
managing certificates on a remote computer, select the Another computer option. Type the
name of the computer you want to manage (or click Browse to select from a list). Click Finish.
7. Close the Add Standalone Snap‐in dialog box, and then click OK to close the Add/Remove Snap‐
in dialog
box.
You
have
now
created
the
console
with
which
to
manage
your
computer's
certificates.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 21/24
8. On the Console menu, click Save As. In the File name text box, type a name for this console, and
then click Save.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 22/24
Importing Certificates Using the MMC Console Created in the Steps Above
You may install or restore certificates and the corresponding private keys from a certificate file.
1. Open the MMC Certificate Console created in step 8 on page 19
2. For the certificate saved as
IntuitPSD.cer
in
step
9 on
page
6,
expand
the
‘Certificates’
folder
tree, right click on the ‘Trusted Root Certificates’ folder and choose All Tasks then Import.
3. The Certificate Import Wizard launches. Click Next.
4. In the File name text box, type the name of the certificate file that you want to import (for the
sake of this document, the name of the file in question ‘IntuitPSD.cer). Alternatively, you can
find the file by clicking Browse.
5. After choosing a certificate file to import, click Next.
6. On the next page, select the destination where you'd like to store the certificate (this will
automatically be
set
to
‘Trusted
Root
Certification
Authorities’.
Click
Next.
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 23/24
7. The next wizard page contains summary information about the file that you are importing. Click
Finish to import the file. The certificate(s) are now ready for use by the system.
8. For the intermediate certificate saved during step 9 on page 13 as IntuitPSD‐Inter.cer, repeat the
certification steps as above only start the wizard from the ‘Intermediate Certification Authorities
8/9/2019 Cert Update 0729
http://slidepdf.com/reader/full/cert-update-0729 24/24
folder’