Jump to content

Recommended Posts

Posted
Ive spoken to our LEA about this and they will only give a free certificate to the sch.uk domain, we have our own domain so they will not offer a free certificate.
Posted
Would this be ok with HAP?? Also whats the catch?
None as far as I'm aware, works with all major browsers. The only thing with the free certificates is that the validity period is only 1 year so you will have to renew them each year.
Posted
Ive spoken to our LEA about this and they will only give a free certificate to the sch.uk domain, we have our own domain so they will not offer a free certificate.

 

I'm just in the process of getting one from our LEA (LLN) for our .co.uk domain...

Posted
None as far as I'm aware, works with all major browsers. The only thing with the free certificates is that the validity period is only 1 year so you will have to renew them each year.

 

I have to do it with our exchange one at the moment anyway so no real biggie

 

I'm just in the process of getting one from our LEA (LLN) for our .co.uk domain...

 

I dont understand why our LEA wont allow our .co.uk to be free then? :S

Posted
I have to do it with our exchange one at the moment anyway so no real biggie

 

 

 

I dont understand why our LEA wont allow our .co.uk to be free then? :S

 

Tim:

Local authorities and Regional Broadband Consortia in England, Wales and Scotland, are able to request SSL Server Certificates* for .sch.uk domains, through the Janet Certificate Service. These certificates are *free* for subscribers of the service.

 

* Includes Comodo's single and multi-domain Server Certificate. Currently other certificate types cannot be obtained for schools.

 

Instructions for English, Welsh and Scottish local authorities and Regional Broadband Consortia

 

To request a server certificate on behalf of a school under your authority, please follow the steps below:

 

NB: The name and school number in the DNS whois record held at Nominet must match exactly that of the eduBase (or equivalent) record for the certificate request to be accepted.

 

(1) The local authority or Regional Broadband Consortia (RBC) must be subscribing to the Janet Certificate Service, instructions can be found here.

 

(2) The local authority or RBC then needs to send a request to the Janet Service Desk ([email protected]) to activate the 'schools facility' and request that the schools in their area be added to the account. Please specify the three digit DfE LEA code for your local authority or a list of relevant SEED numbers.

 

(3) Once we have activated the School facility on your account, you log in to the online service portal, here, and submit a Certificate Signing Request (CSR).

 

 

(4) If the CSR contains a .sch.uk domain, the Certificate Requester will be given the option of whom to send the authorisation email to at the school.

 

NB: the CSR must contain a .sch.uk domain as the first Common Name to enable the school facility, however other Subject Alternative Names (SANs) are allowed, including non-.sch.uk domains, such as schoolname.co.uk. All SANs however must also be registered to that same school.

 

(5) In order to successfully process a certificate request on behalf of a school, the owner of the domain (the school) must give consent for the local authority or RBC to obtain a certificate on their behalf.

 

The school authorisation email will contain explanatory information and a link for the school to click on, to give their consent. The email will also state the email address of the certificate requester, as well as how to contact Janet if they are unsure of what to do.

 

(6) - NEW! With the introduction of a new security step in the Certificate Issuance process, a person at the school will ALSO be required to complete an email challenge response, called Domain Control Validation (DCV). The DCV process is the last step before Comodo will issue the certificate, and must be completed. Click here for details and a list of permissible email addresses which you can choose to the DCV email to. The email address is limited to 5 generic email addresses based on any domains in the CSR, or an email address listed in the c-reg field of the DNS registration (if one exists).

 

To view a copy of the email being sent to the school asking for authorisation, see here

 

To view a copy of the DCV email that is sent to the school to an email address the Certificate Requester has to select, click here

 

(7) Once the school provides the necessary permission (step 5, above) and completes the DCV process (step 6), Comodo will issue the certificate. With the introduction of DCV, certificates are issued much quicker, usually within 15 minutes. Please check the certificate request status within However, ertificates generally only take a couple of hours to be processed but can take up to 24 hours.

 

Nominet's whois: WHOIS tool | Nominet

 

EduBase records: Home

 

SEED records: School Details

 

If you have any questions regarding this facility please contact the Janet Service Desk by sending an email to [email protected].

 

So you need a multi-name SSL certificate it seems with the .sch.uk being the primary one but can have the alternate as the .co.uk

 

So give them a bit more of a poke if you have no joy let me know I'll put it on the agenda for next months meeting and/or poke higher up if you like.

Posted
All School qualify for free SSL certificates through the JANET certificate system.

You need to contact your RBC or LEA.

 

 

I've been advised by our LEA Data Team that JANET will now be charging for the SSL cerificates from 1st April 2013 so get them whilst you can!

Posted
I've been advised by our LEA Data Team that JANET will now be charging for the SSL cerificates from 1st April 2013 so get them whilst you can!

 

Really :( Damn and blast that was doing well at saving me ££

 

At least the ones I've got are 3 year ones from them so that is something

  • 2 weeks later...
Posted
I'm just in the process of getting one from our LEA (LLN) for our .co.uk domain...

 

you mean lln have actually done something wonders will never cease

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...