Partner: How to replace a Code Signing Certificate

Solution ID:    SO1737    Updated:    09/22/2016

Solution

If a certificate was not backed up and one of the following changes was made, you may need to replace the Code Signing certificate:
  • A computer crash.
  • Original computer is no longer available.
  • Changes to the computer's browser or profile.

Note: All replacements are free of charge for as long as the certificate is valid. 

To replace a Code Signing Certificate, choose from one of the following:

To Replace a Code Signing Certificate for Microsoft Authenticode, Code Signing Certificate for Microsoft Office and VBA or Symantec Code Signing Certificate for Adobe Air Certificate:

  1. Visit the following page:
    https://products.websecurity.symantec.com/orders/orderinformation/authentication.do
  2. Enter the requested information.
    • Fully qualified domain name (Common Name) of the certificate (enter Organization Name for Code Signing).
    • A contact e-mail address listed in the certificate order (Corporate or Technical Contact).
    • The 5-digit number displayed in the image.
  3. Click Continue. A list of all certificates that meet the Common Name and contact e-mail criteria will appear.
  4. On the Order Information page, select Request Access for the appropriate order you wish to replace.
  5. An order access Authentication email will be sent to the Technical Contact on the order, and the instructions on the email need to be completed.
  6. Within the User Portal, click Reissue Certificate on the left hand column.


     
  7. Select Local CSR Generation. This will bypass the Certificate Signing Request (CSR) option.

  8. Fill out the requested information and submit the order.

Important Note: The replacement procedure only deactivates the certificate.  Previously signed code will not be affected. 
 

To Replace a Code Signing Certificate for Sun Java Certificate:

  1. Visit the following page:
    https://products.websecurity.symantec.com/orders/orderinformation/authentication.do
  2. Enter the requested information.
    • Fully qualified domain name (Common Name) of the certificate (enter Organization Name for Code Signing).
    • A contact e-mail address listed in the certificate order (Corporate or Technical Contact).
    • The 5-digit number displayed in the image.
  3. Click Continue. A list of all certificates that meet the Common Name and contact e-mail criteria will appear.
  4. On the Order Information page, select Request Access for the appropriate order you wish to replace.
  5. An order access Authentication email will be sent to the Technical Contact on the order, and the instructions on the email need to be completed.
  6. Within the User Portal, click Reissue Certificate on the left hand column.


     
  7. Select the Hashing Algorithm, and enter the new Certificate Signing Request (CSR).

  8. Fill out the requested information and submit the order.

Important Note: The replacement procedure only deactivates the certificate.  Previously signed code will not be affected.

Note: When replacing a Code Signing Certificate for Sun Java, a new keystore, private key, and Certificate Signing Request (CSR) would need to be generated. The distinguished name should be identical to the original certificate. Refer to the article on how to generate a keystore for Code Signing Certificate for Sun Java: INFO185

 

Disclaimer:

Terms of use for this information are found in Legal Notices

Contact Support

Knowledge Center