| Frequently Asked Questions (FAQ's)
and
Troubleshooting Tips
What is a digital certificate?
A digital certificate is an electronic "credit card"
that establishes your credentials when doing business or other
transactions on the Web. It is issued by a certification authority
(CA). It contains your name, a serial number, expiration dates,
a copy of the certificate holder's public key (used for encryption
messages and digital signature), and the digital signature of
the certificate-issuing authority so that a recipient can verify
that the certificate is real. Digital certificates can be kept
in registries so that authentication users can look up other users'
public keys.
A
What SHA algorithm is used for the client certificate?
Effective November 13, 2015 Deluxe client certificates are issued with a SHA256 algorithm.
Existing SHA128 client certificates will continue to work until they expire.
What is the difference between an individual certificate and an enterprise certificate?
An individual certificate is intended by a single user to load into their local browser. An enterprise certificate is intended to be used by a group of users through an application used for account maintenance, account opening, home banking, etc,. The application would be programmed by either a third party vendor or the financial institution's internal developers to access the certificate from a server and redirect users programmatically into the desired Deluxe application.
How do I get a certificate?
The certificate enrollment process triggers an electronic script that runs within your browser to generate a digital certificate within the personal keystore in your browser. Simply go to the Deluxe Certificate Management System Web site at http://cert.deluxe.com,
and then click the Enroll Now button. You are guided through the process by a series of on-screen dialog boxes and prompts. You will need to obtain a user ID, password, and PIN from Deluxe or your financial institutions administrator before beginning the enrollment process.
What if I have questions or need help getting
my certificate?
You can get answers to your questions and/or
assistance with the enrollment process in any of the following
ways:
- Read through this FAQ to see if your question may be
answered here.
- For Internet Explorer users, review the step-by-step instructions provided Certificate enrollment instructions for Microsoft® Internet Explorer users
Certificate
enrollment instructions for Microsoft® Internet Explorer/users or Firefox instructions
- Ask your local administrator for help. Some organizations designate an individual as the administrator of the Deluxe certificate program who has the ability to issue and reset pins. You may also need their assistance in adjusting your workstation and/or browser permission settings to be able to run the script that generates the certificate.
- If you are still experiencing problems,
contact Deluxe Electronic Support at
1-800-328-8434.
I didn't get my certificate enrollment information
(my user ID, password, and PIN). What should I do?
Your administrator can assist you in obtaining
a user ID, password, and/or PIN.
If you do not have an administrator, contact
Deluxe Electronic Support at 1-800-328-8434.
Can I see the certificate? How do I know
it's really there?
The process for verifying that your certificate
is in place depends on the browser you are using.
Internet Explorer Users:
- Choose Tools>Internet
Options.
- Click the Content
tab.
-
Click the Certificates button.
- Click the Personal
tab. This tab displays a list of all the certificates that reside
in the Windows certificate store of your computer.
For Firefox Users:
- Choose Tools>
Options.
- Click the Advanced
tab.
- Click the Certificates
tab.
- Click the View Certificate
button.
- Your Certificate is under Your Certificates
tab.
Now that I have my Deluxe certificate, how
do I use it to securely access Deluxe systems?
Use of the certificate, which guarantees your identity to Deluxe, is virtually transparent to you as a user. For an individual certificate you may be prompted to use the URL supported by Deluxe. To access your application for enterprise certificates follow your internal application directions for configuring your client certificate to be accessible through your application.
Can someone else at my financial institution
use my individual certificate?
Your certificate uniquely identifies you to
Deluxe so it is important that no one else at your financial institution
use your certificate. Each person at your financial institution
should have his/her own certificate from Deluxe. There is one
digital certificate per user per workstation.
What happens if I get a new computer?
The certificate PIN will be reset, after which you will go through the enrollment process again on your new computer and can remove the old certificate. Ask your administrator for assistance. If you do not have an administrator, contact Deluxe Electronic Support at 1-800-328-8434 for assistance.
Does my certificate ever expire?
Yes. Your certificate will expire three years from the date it was downloaded. When an individual certificate is due to expire, you will be notified 30 days in advance when you log on to the site and have the opportunity to renew your certificate through the automated certificate renewal process. If you need assistance please contact your administrator or primary technical contact. For enterprise certificates you will be notified by Deluxe and a replacement enterprise certificate will be issued to the primary technical contact.
How do I request an administrative certificate or change the existing administrator?
Please contact Deluxe Electronic Support at 1-800-328-8434 and request additional certificate enrollment information (user IDs, passwords, and PINs). The new certificate enrollment information is typically issued within five working days.
How do I remove an expired or obsolete digital certificate?
The process for verifying that your certificate
is in place depends on the browser you are using.
Internet Explorer Users:
-
Choose
Tools>Internet
options
-
Click on the Content tab and then click on the
Certificates button
-
Highlight the certificate and then click the REMOVE
button
-
Click YES to the warning that pops up.
-
Click Close, click Apply (if applicable), click on
OK to exit Internet Options
For Firefox Users:
- Choose Tools>
Options.
- Click the Advanced
tab.
- Click the Certificates
tab.
- Click the View Certificate
button.
- Your Certificate is under Your Certificates
tab.
- Highlight the certificate and then click Delete or Distrust
button.
I have received a VBScript error "D" when
trying to download a certificate. How do I resolve this error?
Go to: https://cert.deluxe.com/OneStep/DeluxeRootCA.crt
Click Install Deluxe Root CA Certificate.
Click on the Open button
Click on the Install Certificate button
Click on the Next button
Select the Place all certificates in the following store and click on the Browse button
Check the Show Physical Stores button and then Highlight the Trusted Root Certification Authorities, if there is Local Computer under Trusted Root Certification Authorities select that, if not highlight Trusted Root Certification Authorities.
Click on the Next button
Click on the Yes button
Click on the OK button
For Internet Explorer 10 or lower refer to our Microsoft Internet Explorer Instructions here
I have received an Internal Error Plug-in
status: 1362 error.
How do I resolve this error?
This error means the certificate shows downloaded. The PIN can only be used once. Please contact your administrator to reset the PIN. If this is for an enterprise certificate or an administrative certificate you will need to contact Deluxe Electronic Support at 1-800-328-8434.
I have received an error 'the Following Error Occurred OneStep enrollment failed.' How do I resolve this error?
Go to: https://cert.deluxe.com/OneStep/DeluxeRootCA.crt
Click Install Deluxe Root CA Certificate.
Click on the Open button
Click on the Install Certificate button
Click on the Next button
Select the Place all certificates in the following store and click on the Browse button
Check the Show Physical Stores button and then Highlight the Trusted Root Certification Authorities, if there is Local Computer under Trusted Root Certification Authorities select that, if not highlight Trusted Root Certification Authorities.
Click on the Next button
Click on the Yes button
Click on the OK button
For Internet Explorer 10 or lower refer to our Microsoft Internet Explorer Instructions here
I have received an 'Authentication Failed' error when trying to download a certificate. How do I resolve this error?
The USER ID, Password or PIN has been entered incorrectly. Please try again. If you are still having difficulty please contact your administrator to reset the PIN. If this is for an enterprise certificate or an administrative certificate you will need to contact Deluxe Electronic Support at 1-800-328-8434.
I have received a ‘Required Attributes Missing’ error when trying to download a certificate. How do I resolve this error?
Go to: https://cert.deluxe.com/OneStep/DeluxeRootCA.crt
Click Install Deluxe Root CA Certificate.
Click on the Open button
Click on the Install Certificate button
Click on the Next button
Select the Place all certificates in the following store and click on the Browse button
Check the Show Physical Stores button and then Highlight the Trusted Root Certification Authorities, if there is Local Computer under Trusted Root Certification Authorities select that, if not highlight Trusted Root Certification Authorities.
Click on the Next button
Click on the Yes button
Click on the OK button
For Internet Explorer 10 or lower refer to our Microsoft Internet Explorer Instructions here
What should I do if someone with a Deluxe
certificate leaves my organization?
Your Administrator should immediately revoke the certificate using their Administrative Certificate. If your administrator does not have an administrative certificate they should contact Deluxe Electronic Support at
1-800-328-8434.
How do I manage digital certificates issued to users at my financial institution ?
Your technical adminitrator may have a spreadsheet of users, or access the self serve Deluxe Certificate Administrative online site. If you have less than 10 individual users a spreadsheet is supplied. It is important for the administrators to know who is using each certificate. Keep the information current as employees join and leave your organization. .
How do I, as an administrator, track who
is assigned each certificate within my organization?
For basic security purposes, it is very important that you know who each Deluxe digital certificate is assigned to within your organization. Be sure to use a secure method to record the certificate number that is assigned to each user. The online Administrative Site has a free form field to enter the user’s name. You will use the information if someone leaves or joins your organization or needs a new digital certificate.
Will I need to remember the digital certificate enrollment information (user ID, password, and PIN) that was used during the certificate enrollment process?
Administrators will need to keep track of user IDs and Passwords. A PIN is used only once when a digital certificate is installed or renewed. Therefore, you do not need to keep track of the PIN after the installation is complete.
How do I get additional certificates for new users in my organization?
Your Administrator can log on to the Deluxe Administrative Site and create new certificates. Only your authorized administrators can request additional certificates from Deluxe. Administrators can contact Deluxe Electronic Support at 1-800-328-8434 and request additional certificate enrollment information (user IDs, passwords, and PINs). The new certificate enrollment information is typically issued within five working days.
Go Home.
|
