UC Irvine Certificate Service

UC Irvine is participating in the InCommon Certificate program, which allows delegated administrators in campus departments to issue and renew digital certificates used for such purposes as securing web servers run on behalf of their department.  Through the InCommon Certificate program, UC Irvine pays a site fee (sponsored by OIT), and is then entitled to issue unlimited digital certificates through Comodo, a well-established commercial Certificate Authority. More information about this program is available at http://www.incommonfederation.org/cert/

Benefits

Allows campus units to "freely" issue unlimited trusted SSL certificates for campus services. It will allow us to centralize obtaining certificates in a standardized way, centralize reporting and notifications on when they are expiring, remove the need to generate untrusted self-signed certificates, no longer propagate the insecure mindset of users ignoring certificate warnings in web browsers, and in the long run cut costs that the campus as a whole spends annually on SSL certificates.

Available Certificate Types

The InCommon Certificate Service makes the following products available for up to a 3-year expiration term:

• Standard SSL Certificates
• Intranet (private network) Certificates
• Multi-Host SAN (Subject Alternative Name) Certificates
• EV (Extended Validation) Certificates by special request

Resources

• Campus Mailing List - Subscribe to get updates, ask questions, share information with others on campus using this service
• System Administrator FAQ - Tips for installing and using certificates on servers
• Certificate Service Administrator Responsibilities

Campus Contacts

If your department/school is not listed and you want to use the service, have your IT Director contact security@uci.edu to get started.