Local authorities and Regional Broadband Consortia in England, Wales and Scotland, are able to request SSL Server Certificates* for .sch.uk domains, through the Janet Certificate Service. These certificates are *free* for subscribers of the service.
* Includes Comodo's single and multi-domain Server Certificate. Currently other certificate types cannot be obtained for schools.
Instructions for English, Welsh and Scottish local authorities and Regional Broadband Consortia
To request a server certificate on behalf of a school under your authority, please follow the steps below:
NB: The name and school number in the DNS whois record held at Nominet must match exactly that of the eduBase (or equivalent) record for the certificate request to be accepted.
(1) The local authority or Regional Broadband Consortia (RBC) must be subscribing to the Janet Certificate Service, instructions can be found here.
(2) The local authority or RBC then needs to send a request to the Janet Service Desk (firstname.lastname@example.org) to activate the 'schools facility' and request that the schools in their area be added to the account. Please specify the three digit DfE LEA code for your local authority or a list of relevant SEED numbers.
(3) Once we have activated the School facility on your account, you log in to the online service portal, here, and submit a Certificate Signing Request (CSR).
(4) If the CSR contains a .sch.uk domain, the Certificate Requester will be given the option of whom to send the authorisation email to at the school. NB: the CSR must contain a .sch.uk domain as the first Common Name to enable the school facility, however other Subject Alternative Names (SANs) are allowed, including non-.sch.uk domains, such as schoolname.co.uk. All SANs however must also be registered to that same school.
(5) In order to successfully process a certificate request on behalf of a school, the owner of the domain (the school) must give consent for the local authority or RBC to obtain a certificate on their behalf.
The school authorisation email will contain explanatory information and a link for the school to click on, to give their consent. The email will also state the email address of the certificate requester, as well as how to contact Janet if they are unsure of what to do.
(6) - NEW! With the introduction of a new security step in the Certificate Issuance process, a person at the school will ALSO be required to complete an email challenge response, called Domain Control Validation (DCV). The DCV process is the last step before Comodo will issue the certificate, and must be completed. Click here for details and a list of permissible email addresses which you can choose to the DCV email to. The email address is limited to 5 generic email addresses based on any domains in the CSR, or an email address listed in the c-reg field of the DNS registration (if one exists).
To view a copy of the email being sent to the school asking for authorisation, see here
To view a copy of the DCV email that is sent to the school to an email address the Certificate Requester has to select, click here
(7) Once the school provides the necessary permission (step 5, above) and completes the DCV process (step 6), Comodo will issue the certificate. With the introduction of DCV, certificates are issued much quicker, usually within 15 minutes. Please check the certificate request status within However, ertificates generally only take a couple of hours to be processed but can take up to 24 hours.
Nominet's whois: WHOIS tool | Nominet
EduBase records: Home
SEED records: School Details
If you have any questions regarding this facility please contact the Janet Service Desk by sending an email to email@example.com