Identity For Everything - GlobalSign

Transcription

Identity for EverythingQuick Start Guide: Certificate Inventory ToolNovember 2019

Table of Contents IntroductionLogging inDashboardMenuDiscovery/Scanning– Groups– Agents (Internal Scans) Reports Other FeaturesCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.2

IntroductionDo you know where you have SSL certificates installed? How about when eachcertificate is going to expire and which CA you ordered from? What about thehashing algorithm or key lengths used?The answers are likely no, or at the very least yes, but it’s difficult to compile all theinformation. We’re happy to offer our customers free access to the GlobalSignCertificate Inventory Tool (CIT) to find all SSL certificates on your networks - bothinternal and public-facing - regardless of the issuing CA.The resulting inventory is available in an easy-to-use portal, allowing you to runreports on usage, upcoming renewals, configurations, and CA issuance.This quick start guide is designed to give you the information you need to start usingthe GlobalSign CIT. Let’s get started!Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.3

Logging inNow that you have a CIT account, go towww.cit.globalsign.com and log in byentering your company email and thepassword you selected during the sign-upprocess.Note: CIT is a GlobalSign-branded instance of Remme Keyhub. All support questions should be directed to your account manageror support@globalsign.com.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.4

DashboardThe Dashboard is the main screen where you can view summary pie charts on the certificates in yourinventory based on key size, hash, issuing CA, and an expiration timeline. You can run a scan whenyou are logging into CIT for the first time, or you can do it later.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.5

MenuRun a scan of one orall certificate groupsAccess yourDashboardAccess yourcertificate inventoryThe left menu is alwaysvisible. All main functions canbe accessed from this menu.Access your savedscan profilesAccess otherplatform toolsCreate a certificategroupAccess your savedreportsView FAQ articles,contact GlobalSignSupport, view accountsettingsCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.6

Discovery/Scanning1.2.Click Discovery in the left menu.Enter the details for your scan profile––––3.Domains and sub-domainsCT log monitoringScheduleNote: if you want to run an internalscan, you will have to create anAgent first.Save the profile, which will run thescan.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.7

Discovery/ScanningAfter the scan runs, the results will populate your Inventory.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.8

Discovery/ScanningClick on a certificate to expand and view more detailed informationabout the certificate.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.9

Discovery/Scanning - GroupsClick Create group in the left menu to create groups of certificates based on various certificate elements (expirationtime, key size, common name etc.). Once saved, you can view certificates that are part of this group, and individuallyscan groups.View certificates in the groupCreating a new groupCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.10

Discovery/Scanning - AgentIf you want to run a scan of yourinternal networks, you will need toset up an agent.1. In the Discovery screen, clickAgents and then Create.2. Name the Agent and chooseyour operating system.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.11

Discovery/Scanning - Agent3. Download the Agent toyour machine.4. Activate the Agent.5. Create an InternalScan Profile.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.12

ReportsYou can create and schedule reportsto receive information on one ormore of your certificate groups.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.Reports will be delivered to youremail in a PDF file.13

Other Features CSR Decoder – Upload CSR to view more information about the request– Paste CSR raw text– Upload .pem fileCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.14

Other Features Certificate Decoder – Upload public key to view more information about thecertificate– Paste public key raw text– Upload .pem fileCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.15

Other Features CSR Generator – Generate a CSR toinitiate new certificate issuance (notthrough CIT)– Enter basic information about thecertificate and then click Generate.– Information entered here will not besaved or retrievable elsewhere in thetool.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.16

Other Features Search Bar– Basic search shows where and how many times your keyword appears in yourportal– Advanced search is similar to Inventory Group creatorCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.17

Other Features Archive Certificates– Archiving certificatesremoves them from yourInventory and mutesexpiration notifications– Archiving certificatesremoves them from reportresults– If the certificate isrenewed or addedmanually to CIT, it willreappear in Inventory andreports, and notificationswill resume.Copyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.18

Questions? Problems? FAQ Articles: https://faq.cit.globalsign.com/ GlobalSign CIT Support l/articles/2983266 GlobalSign Sales RepCopyright 2019 GlobalSign. Confidential & Proprietary. All rights reserved.19

Thank youAbout GlobalSignGlobalSign is the leading provider of trusted identity andsecurity solutions enabling businesses, large enterprises,cloud service providers and IoT innovators around theworld to secure online communications, manage millionsof verified digital identities and automate authenticationand encryption. Its high-scale Public Key Infrastructure(PKI) and identity solutions support the billions ofservices, devices, people and things comprising theInternet of Everything (IoE).

Thank you About GlobalSign GlobalSign is the leading provider of trusted identity and security solutions enabling businesses, large enterprises,