OVERVIEW: This page covers everything you need to know about GlobalSign PersonalSign Certificate. For certificate installation instructions, please refer to this guide. Can't find what you're looking for? Get in touch for assistance.

What is PersonalSign Certificate?

A PersonalSign Digital Certificate is a Digital ID issued to an entity (i.e. individual or a department) that helps to prove that entity’s identity. The Digital ID binds an individual’s verified identity (typically including the name, company name and email address of the Digital ID owner) to a unique cryptographic credential. PersonalSign Certificates identify, prove and contain different levels of information. 

GlobalSign's PersonalSign Certificates can be used for multiple purposes:

• Microsoft Office Document Signing - Digitally Sign Microsoft Office Documents.
  
  GlobalSign PersonalSign Certificates are trusted by Microsoft Office systems and allow you to create digital signatures. Applying a digital signature to a document proves the information originated with the signer and that the document has not been altered since the document was signed, ensuring document integrity. This allows for secure electronic document work flows and eliminates time and resources spent by replacing paper-based work flows. It also meets compliance requirements associated with electronic work flows. When applying a digital signature, you can choose to insert an image file containing a handwritten signature or other image of your choice.

• Two Factor Authentication (2FA) - Strong Authentication to networks, VPNs, cloud services and more.
  
  Client Authentication is the process by which users securely access a server or remote computer by exchanging a Certificate. Networks and web services can be configured to only allow access to particular Certificates. Authentication prevents unauthorized access and enhances current security. It can be used for in-browser client authentication to VPNs, smart card technology, cloud applications, and mobile devices. PersonalSign Certificates are approved Digital Certificates for various online services including the FDA ESG and NAESB Electronic Industry Registry.

Learn more about the various uses of GlobalSign's PersonalSign Certificates by visiting the PersonalSign Certificates page on GlobalSign.com.

How do I order a PersonalSign Certificate?

You can purchase your PersonalSign Certificate in the following platforms:

• If you are a new customer, you can order your certificate through our website to create a GCC account. 
• If you are an existing customer with an active GCC account, please refer to this page to place your new order. 

You can also place an order in bulk (5+ certificates) through GlobalSign’s Managed PKI platform. Benefits of Managed PKI include pre-vetting for instant certificate issuance, volume discounts, easy certificate management and more. Contact an Account Manager to get started with Managed PKI. 

Once you complete your order, our Vetting team will verify the application details and call to confirm/verify your order (1 – 3 business days). An Organization’s identity is verified by GlobalSign’s vetting team in accordance with the steps described in the GlobalSign CA Certification Practice Statement (CPS). GlobalSign will verify the Organization is legitimate using third party verification services such as a qualified government information source.

IMPORTANT: If you choose credit card as your mode of payment, we will be sending a link to proceed with your payment. Once your order is ready, please refer to this page to process your payment. After vetting is complete and payment is confirmed, your certificate is ready to issue. 

How do I Reissue my PersonalSign Certificate?

For PersonalSign Certificate reissue, please refer to this page. Reissue is only advised in the following scenarios:

• If you need to install the Certificate on a new machine, however you have lost the original downloaded file to install.

• You cannot retrieve the auto-generated password for the .pfx file when you downloaded and installed it originally.

• If the Certificate’s private key has become compromised; we advise that the compromised Certificate be revoked after reissuance.

• If you need to install the Certificate on a new machine but are unable to export it in a .pfx format (Including private key) from the machine where you installed it originally

IMPORTANT: When a PersonalSign Certificate is reissued/renewed a new private and public key pair is generated. Our PersonalSign Certificates are used for three functions, which are affected in the following ways:

• Digitally signing an email. Using a reissued/renewed Certificate will not have any affect when signing new emails and old emails will still show as correctly signed.

• Encrypting an email. The reissued/renewed Certificate can be used to encrypt new emails. However, it cannot be used to decrypt old emails that were encrypted with the original Certificate as the original Certificate will have its own unique private and public key pair. The original Certificate will need to be used to decrypt any emails it was used to encrypt. For this reason, we recommend saving a copy of your original Certificate(s).

• Authentication. The public key of the reissued/ renewed Certificate will not match the public key of the original Certificate. This will mean that if you want to use your reissued/renewed Certificate for authentication, you will need to export your new public key and provide it to the service you are trying to authenticate to.

How do I export/back-up my Certificate?

Depending on what you’re trying to do, e.g. exporting your Certificate to install on to another machine or exporting your Certificate in a file which is required by a third-party website to authenticate, the following guides should assist you.

• To export your Certificate in a .pfx file, you can use this guide.
• To export your Certificate in a .cer file, you can use this guide.
   

How do I configure PersonalSign Certificates in mail clients to sign and encrypt emails?

GlobalSign's PersonalSign certificates are compatible with the leading programs and are an easy to use. For instructions on how to sign email with your GlobalSign PersonalSign Certificate, refer to the links below:

• Configure PersonalSign Certificate - Mozilla Thunderbird
• Configure PersonalSign Certificate - Microsoft Outlook 2003
• Configure PersonalSign Certificate - Microsoft Outlook 2007
• Configure PersonalSign Certificate - Microsoft Outlook 2013, 2016 and 2019
• Configure PersonalSign Certificate - Microsoft Outlook Express
• Configure PersonalSign Certificate - Office 365