The Pickup Password requested during the download and installation of your Certificate is set during the ordering process. It is used to ensure that the person responsible for ordering the Certificate is the one to install it.
As of May 2019, GlobalSign migrated some of its SSL/TLS Products over to Root R3 and Root R5 as part of our CA life cycle management process and to address SHA-1 Root concerns.