downloading dea certificates - mckessonbefore you begin retrieving your csos certificate from...

93
Rev. 20151026.10 1 CSOS Guide (Java) Table of Contents: Retrieve your CSOS Certificate .......................................................................Pages 2-24 (Steps r1 - r19) Export your CSOS Certificate .........................................................................Pages 25-39 (Steps e1 - e15) Send a Live Test Order .....................................................................................Pages 40-50 (Steps s1 - s10) CSOS Receiving .................................................................................................Pages 51-58 (Steps ro1 - ro10) Transfer your CSOS Certificate to other Computers ....................................Pages 59-66 (Steps t1 - t8) Fixing Security Settings .....(May not need).......................................................Pages 67-93 (Steps c1 - c27) The Drug Enforcement Administration (“DEA”) is solely responsible for issuing certificates. Any questions about DEA’s process, requirements or compliance with or interpretation of federal law or regulations should be directed to DEA. This document is intended as a guide for completing DEA CSOS process and McKesson is not responsible for any changes to the requirements or procedures for obtaining a DEA certificate or for any errors or problems that may occur in accessing or receiving certificates from DEA’s CSOS website. Table of Contents

Upload: others

Post on 16-Feb-2020

29 views

Category:

Documents


1 download

TRANSCRIPT

Rev. 20151026.10 1

CSOS Guide (Java)

Table of Contents:

Retrieve your CSOS Certificate.......................................................................Pages 2-24

(Steps r1 - r19)

Export your CSOS Certificate.........................................................................Pages 25-39

(Steps e1 - e15)

Send a Live Test Order.....................................................................................Pages 40-50

(Steps s1 - s10)

CSOS Receiving.................................................................................................Pages 51-58

(Steps ro1 - ro10)

Transfer your CSOS Certificate to other Computers....................................Pages 59-66

(Steps t1 - t8)

Fixing Security Settings.....(May not need).......................................................Pages 67-93

(Steps c1 - c27)

The Drug Enforcement Administration (“DEA”) is solely responsible for issuing

certificates. Any questions about DEA’s process, requirements or compliance with or

interpretation of federal law or regulations should be directed to DEA. This document is

intended as a guide for completing DEA CSOS process and McKesson is not responsible

for any changes to the requirements or procedures for obtaining a DEA certificate or for

any errors or problems that may occur in accessing or receiving certificates from DEA’s

CSOS website.

Table of Contents

Rev. 20151026.10 2

Retrieve your CSOS Certificate

Before you begin retrieving your CSOS certificate from DEA’s CSOS website, you will need both of the

Certificate Retrieval Activation Notices. Do not proceed until you have these documents available.

Below are some key sections on the Retrieval Activation Notices to keep watch for during the process.

Postal Mailed Retrieval Activation Notice:

Step 2 contains the login information for the retrieval website (User Name and Website Password)

(The text for Step 2 is blue)

Step 3 contains your Access Code Password for your individual CSOS Certificate.

(The text for Step 3 is red)

Emailed Retrieval Activation Notice: The email will contain your Access Code for your individual CSOS Certificate.

Table of Contents

Rev. 20151026.10 3

Make sure you have both of your Activation Notices handy and go to the following website:

http://www.deaecom.gov/retrieve.html

After reading the Policy Agreement, click on the “I Accept” button to continue.

Be sure you fully read and understand the agreement as it pertains to Federal Law.

Table of Contents

Rev. 20151026.10 4

This should take you to the Trust Setup page.

From this page, you will install the following:

All certificates must be installed. Over time, some certificates may be added or removed. DEA website

supersedes the information within this document - refer to DEA website to ensure you install all certificates

appropriately.

Step r1) Click the link to the right of the certificate title to begin the install.

Table of Contents

Rev. 20151026.10 5

Step r2) The below “File Download - Security Warning” window will appear.

Click the “Open” button.

Table of Contents

Rev. 20151026.10 6

The below “Certificate” window will now appear.

Step r3) Click the “Install Certificate” button.

(Note: You may or may not get a red circle with an ‘x’ in the window as shown below - it just means that the

certificate is not yet installed)

Table of Contents

Rev. 20151026.10 7

Step r4) When the “Certificate Import Wizard” window comes up, click the “Next” button.

Table of Contents

Rev. 20151026.10 8

Step r5) Select “Place all certificates in the following store”, and click the “Browse” button.

Table of Contents

Rev. 20151026.10 9

Step r6) Check the box “Show physical Stores”; then, scroll up to and expand “Trusted Root Certification

Authorization”, and select “Registry” in the “Select Certificate Store” window (if registry is not listed, select

“Local Computer”).

Click the “OK” button.

Table of Contents

Rev. 20151026.10 10

“Trusted Root Certification Authorities\Registry” will populate in the “Certificate store” field.

Step r7) Click the “Next” button.

Table of Contents

Rev. 20151026.10 11

Step r8) “Completing the Certificate Import Wizard” will appear in the “Certificate Import Wizard” window.

Click the “Finish” button.

Table of Contents

Rev. 20151026.10 12

Step r9) A “Security Warning” like the one below may appear. If it does, click the “Yes” button and continue

to the next step.

If you do not see a Security Warning pop-up, continue to the next step.

Table of Contents

Rev. 20151026.10 13

A message that your import was successful should now appear.

Step r10) Click the “OK” buttons on the two windows shown below.

(“Certificate Import Wizard” and “Certificate”)

Table of Contents

Rev. 20151026.10 14

Follow the same steps for B (Root CA) by returning to Page 4, Step r1).

For D and E (Sub CA), begin by clicking the link to the left of D or E.

Click the “Open” button.

Click the “Install Certificate...” button.

Click the “Next” button. (Skipping Steps r5- r6)

To finish installing D or E, return to Page 10, Step r7).

After downloading all four DEA Root CA and Sub CA Certificates, click the “Click to continue after installing

all four DEA CA Certificates” on the bottom of the current screen, and continue to the next section.

If you were redirected to Page 4 from Page 59, please return to Page 59 now (after you install all certificates).

If you were redirected to Page 4 from Page 62, please return to Page 62 now (after you install all certificates).

Continue on the next page.

Table of Contents

Rev. 20151026.10 15

The CSOS Certificate Retrieval “Web Site Login” page will come up.

Step r11) Click on the “Retrieve a CSOS Certificate” button.

Table of Contents

Rev. 20151026.10 16

In the Login window that pops up, enter the “Website User Name” and “Website Password”.

You can find these on Step 2 of the postal mailed Retrieval Activation Notice you received from DEA.

Step r12) Click the “OK” button.

Table of Contents

Rev. 20151026.10 17

The “CSOS Certificate Retrieval - Activation Codes” Page will display.

Before entering anything, please Note:

CSP type: - Must be “RSA full”

CSP: Must be “Microsoft Enhanced Cryptographic Provider v1.0”

If the CSP Type shows “Microsoft Base Cryptographic Provider,” change it using the drop down list.

Locate your “Access Code” in the Activation Notice you received via Email.

Enter your Access Code in the “Access Code” field.

Locate Step 3 on your postal mailed Activation Notice for your “Access Code Password”.

Enter your Access Code Password in the “Access Code Password” field.

Note: This field is Case Sensitive and you must enter the dashes.

Step r13) Click the “Submit Request” button.

Table of Contents

Rev. 20151026.10 18

You may see a pop-up window titled “Potential Scripting Violation”.

Step r14) Click the “Yes” button.

Table of Contents

Rev. 20151026.10 19

CRITICAL: READ THE FOLLOWING VERY CAREFULLY.

A window titled “Creating a new RSA exchange key” will appear.

IMPORTANT: DO NOT CLICK OK AT THIS POINT.

YOU MUST SET SECURITY LEVEL TO HIGH!

Step r15) Click the “Set Security Level” button.

If you clicked ‘OK’ instead of the “Set Security Level…” - go to the following section:

“How to Fix Certificate Security” Page 67 Step c1).

If you clicked the “Set Security Level” button, continue to Step r16) on the next page.

Table of Contents

Rev. 20151026.10 20

Step r16) Click the radial button to the left of “High”.

Click the “Next” button.

Table of Contents

Rev. 20151026.10 21

***CERTIFICATE OWNER MUST CREATE PASSWORD***

There will be a new window showing “Create a password to protect this item.”

This will be a password that you create as your private key password.

This password will be used for signing CSOS orders.

The certificate owner must always be able to remember this password.

Your password is private. It is not to be shared with others.

Your password is “CaSe SeNsItIvE”. Make sure you note whether your “Caps-Lock” is ON or OFF because

the way you enter your password here is the way it will be required later.

Do not forget this private key password. If you do, you will have to request a revoke and reissue from DEA.

Neither DEA, nor McKesson have access to your password if you forget it.

Refer to the activation retrieval instructions for password complexity requirements. Typical passwords consist

of at least 8 characters, including at least 1 number; there may be addition requirements by DEA.

Enter the password you create in both the “Password” field and the “Confirm” field.

Step r17) Click the “Finish” button.

Table of Contents

Rev. 20151026.10 22

You should see “Security level set to High” to the left of the “Set Security Level…” button.

Step r18) Now, click the “OK” button.

Table of Contents

Rev. 20151026.10 23

You may see a pop-up window similar to the “Potential Scripting Violation” in the below screenshot.

Step r19) Click the “Yes” button.

This pop-up window may appear more than once; click the “Yes” button if that occurs.

Table of Contents

Rev. 20151026.10 24

Once you have completed the process, you should see a screen similar to the below image indicating a

successful download.

Table of Contents

Rev. 20151026.10 25

Exporting your DEA Signing Certificate

Now that you have successfully downloaded your DEA CSOS Signing Certificate, it is time to export the

certificate, so you can use it to sign your CSOS orders.

Step e1) Click “Tools” from the Internet Explorer menu bar.

Click “Internet Options”.

Table of Contents

Rev. 20151026.10 26

Step e2) In the “Internet Options” window, click the “Content” tab.

Click the “Certificates” button located in the “Certificates” section.

Table of Contents

Rev. 20151026.10 27

The expiration date of your CSOS signing certificate will always correspond with the DEA Registration’s

expiration date of the facility.

If you see more than one certificate with your name listed under the "Issued To" section on the "Personal" tab of

the "Certificates" window, check the expiration date of your certificates and locate the one that matches the

facility's expiration date (within 2 days) of the DEA Registration Form "DEA-223" (the paper certificate).

Step e3) Select your CSOS Certificate and click the “Export” button; this will start the “Certificate Export

Wizard”.

Table of Contents

Rev. 20151026.10 28

The below “Certificate Export Wizard” may have covered the “Certificates” window.

Step e4) Drag the “Certificate Export Wizard” window down until the expiration date of your CSOS Certificate

is visible (this will be beneficial later during the export process).

Click the “Next” button.

Table of Contents

Rev. 20151026.10 29

Step e5) Select “Yes, export the private key” radial button; then, click the “Next” button.

Table of Contents

Rev. 20151026.10 30

Step e6) On the “Export File Format” screen, ensure the radial selection is on “Personal Information Exchange

- PKCS#12 (.pfx)”.

Make sure the following are checked:

“Include all certificates in the certification path if possible”

“Enable strong protection (requires IE 5.0, NT4.0 SP4 or above)”

Some versions of Internet Explorer and Windows have slightly different verbiage - if you see different verbiage,

just check all the boxes EXCEPT one that states “remove” or “delete”.

!!!CRITICAL ATTENTION!!!

Make sure “Delete the private key if the export is successful” IS NOT CHECKED.

Click the “Next” button.

Table of Contents

Rev. 20151026.10 31

***CERTIFICATE OWNER MUST KEY PASSWORD***

Step e7) Type your signing password in both the “Password” and the “Confirm password” fields.

(This is the password you created during the download of your certificate from DEA Step r17)

Click the “Next” button.

Table of Contents

Rev. 20151026.10 32

Step e8) Now, click the “Browse” button.

Table of Contents

Rev. 20151026.10 33

Step e9) Go to the drive that contains the location of your CSOS folder (in most cases, it will be C:\).

Double-click the “CSOS” folder. Create the folder if it does not already exist.

Table of Contents

Rev. 20151026.10 34

Step e10) In the “CSOS” folder, double-click the “Certificates” folder. Create the folder if it does not already

exist.

Table of Contents

Rev. 20151026.10 35

Step e11) Type the following information into the “File name” field:

Your First Name

CSOS SIGN

The Expiration of the Certificate (mm-dd-yyyy)

Note that you can use dashes (-); however, you can not use slashes (/).

Our screenshot example: John CSOS Sign 11-30-2013

Click the “Save” button.

Table of Contents

Rev. 20151026.10 36

The file path and location will populate in the “File name” as seen below.

Step e12) Click the “Next” button.

Table of Contents

Rev. 20151026.10 37

“Completing the Certificate Export Wizard” will appear in the “Certificate Export Wizard” window.

Step e13) Click the “Finish” button.

Table of Contents

Rev. 20151026.10 38

The “Exporting your private exchange key” window will appear.

***CERTIFICATE OWNER MUST KEY PASSWORD***

Step e14) Type your signing password (Your password created in Step r17) in the CryptoAPI Private Key field

and click the “OK” button.

Do NOT check the “Remember password” box.

Table of Contents

Rev. 20151026.10 39

Step e15) A confirmation window will appear that states, “The export was successful.”

Click the “OK” button.

You have completed the Signing Certificate Export process.

Table of Contents

Rev. 20151026.10 40

Send a Live Order to Test your Certificate

Now that you have a successful Certificate Export, you may want to test it before transferring to another

computer.

Step s1) Log in to McKesson Connect.

Table of Contents

Rev. 20151026.10 41

Step s2) Click “See Open Orders” to go to the Ordering section.

If you already have an order, click the PO number and skip to Page 45 Step s6).

If you do not have an order ready, continue to the next page.

Table of Contents

Rev. 20151026.10 42

Step s3) Click “Orders”, mouse-over “Create Order”, and click “Manual”.

Table of Contents

Rev. 20151026.10 43

Step s4) Create a PO number using Letters and Numbers only.

Click the “Go” button.

Table of Contents

Rev. 20151026.10 44

Step s5) Key an item number, NDC, UPC, or Item Description of a Schedule II drug into the “For:” field and

click the “Go” button.

Locate the item you want to order, key the quantity, and click the “Add to Order” button.

Table of Contents

Rev. 20151026.10 45

Step s6) Repeat the previous step if you wish to add more items to your order.

Once you have finished adding to the order, click the “Submit” button at the bottom of the screen.

If you see a Prepare screen, click the “Submit w/o Prepare” button.

Table of Contents

Rev. 20151026.10 46

You will now see “CSOS Signing process in progress” on McKesson Connect like the below example.

Table of Contents

Rev. 20151026.10 47

Step s7) The below “Approve CSOS Order” window will pop up.

1 - Click the “Browse” button in the lower right to locate your certificate.

2 - Navigate to the location where you exported your signing certificate (example - C:\CSOS\Certificates\).

3 - Click your certificate.

4 - Click the “Open” button.

5 - Click the “OK” button.

6 - In the “Password” field, type your CSOS Certificate Password, and click the “OK” button.

7 - If the order was signed and submitted successfully, you will see a blue bar with the word “Done”.

Click the “Close” button.

Table of Contents

Rev. 20151026.10 48

Step s8) You will now see the “Submitted Orders” page.

The “Status” of the order will show “CSOS SSIGNED/IN PROG”.

This means the order is processing for certificate validation.

You can refresh the screen to see the status change. Clicking the “CSOS ID” or any other column heading will

change the order in which the information displays as well as initiate a refresh of the “Status”.

Table of Contents

Rev. 20151026.10 49

Step s9) The next status will be “CSOS SUBMITTED”.

This means that the order was sent to the certificate validation server.

You can occasionally refresh the screen for a status update.

Table of Contents

Rev. 20151026.10 50

Step s10) The final status should display “ACKNOWLEDGED”.

This means that the certificate was validated and the order will be processed.

If you have a status of “REJECTED” or “CSOS REJECTED”, there may be an issue with the certificate of

computer setup. Contact McKesson eCommerce Technical Solutions at 800-793-9875 for assistance.

Table of Contents

Rev. 20151026.10 51

CSOS Receiving - For DEA Archiving

This section will walk you through the CSOS Receiving process which allows you to create an electronic

receipt file that acknowledges your receipt of a given CSOS order, and will show you how to archive these

‘CSOS Received Orders’ to meet archive requirements set forth in the DEA Final Rule.

Step ro1) After logging into McKesson Connect and going to your “Open Orders”, you may see a pop-up

message about processing your CSOS Receiving - if you do not see this message, click the drop-list currently

showing “Open” and change it to “Received”.

Next, locate the PO number of the CSOS Order you that wish to electronically receive.

Click the PO number itself.

Table of Contents

Rev. 20151026.10 52

You will now see the “Received Order Details” screen. Review your order to ensure that every quantity in the

“Invoiced Qty” column matches what you physically received in your McKesson delivery.

Note: If nothing is showing in the “Invoiced Qty” for an item, it means that you should not have physically

received the item (this would indicate the item was omitted from your order).

Step ro2) If the values match your physically received items and your paper invoice, click the “Move

Quantities” button.

If you were billed for Schedule II items you have not received, call McKesson immediately. Request to speak

with the warehouse’s Narcotics (ARCOS) Department to investigate and correct the issue.

Do not process your electronic receiving until speaking with the Narcotics department because once you

finalize the order, it is locked and will not be correctable in case of a counting error or a delayed tote delivery.

Table of Contents

Rev. 20151026.10 53

Step ro3) You will see a confirmation pop-up window after clicking the “Move Quantities” button.

Simply click the “OK” button.

If no individual line item changes are needed, skip to Page 55 Step ro7).

Step ro4) If you want to change the quantity of an individual line item, click the “Edit Item” button.

Table of Contents

Rev. 20151026.10 54

Step ro5) Enter the quantity you wish to report as received, and click the “Save” button.

Step ro6) You will see a confirmation pop-up window after clicking the “Save” button.

Simply click the “OK” button.

Table of Contents

Rev. 20151026.10 55

Step ro7) Review your order one more time to make sure the quantities are accurate. Make any changes

necessary.

Once you have verified the quantities, click the “Finalize” button.

Step ro8) You will see a confirmation pop-up window; simply click the “OK” button.

Table of Contents

Rev. 20151026.10 56

Step ro9) After finalizing your order, it is time to download a copy for your CSOS Archives. If you did not see

an automatic pop-up like the below image, look at the bottom of the “Received Order Details” and change the

drop-list from “Standard” to “222 Format/PDF”; then click the “Download” button.

Click the “Save” or “Save As” button.

Note: newer web browsers may require looking at the bottom of the window to click “Save As”.

Step ro10) Locate your CSOS Received Orders folder. If you do not have one, take a moment to create it.

The “222 Format/PDF” should have a default name, you can change it or add to it, then click the “Save” button.

Table of Contents

Rev. 20151026.10 57

Step ro11) Your CSOS Receiving process has been completed. You will see that the Received Status has

changed to “FINALIZE”. Click the “Return” button at the bottom of the screen to go back to your “Received

Orders” list.

Rev. 20151026.10 58

You may now process the next CSOS Order for receiving if you desire.

Step ro12) If you want to review other Finalized orders, make sure that the following two checkboxes are

unchecked, and click the “Go” button:

Not Finalized

Not Downloaded

This will show your previously Finalized CSOS Orders if you want to review them for any reason.

Keep in mind that there is a limit to the amount of time that these orders will remain; we suggest downloading

them at the time they are finalized to eliminate the possibility of data loss.

Table of Contents Table of Contents

Rev. 20151026.10 59

Transferring your Signing Certificate to Other Computers

Now that you have a successful export, the following steps will walk you through transferring the certificate to

each of the computers with which you wish to sign CSOS orders.

Preparing the next computer for your signing certificate:

1. Go to the next computer on which you wish to load your signing certificate.

2. Open an Internet Explorer window and follow the steps listed on Pages 4 through 14 of this document.

3. When you have finished, return to this page.

Continue to the next page.

Table of Contents

Rev. 20151026.10 60

Step t1) Insert your transfer media (Flash Drive, External Drive, etc.) into the appropriate drive or USB port of

the original computer on which you downloaded your certificate.

Go to the “Desktop” in Windows, and double-click the “My Computer” icon (may appear as “Computer” in

Windows Vista/7 or “This PC” in Windows 8).

If you do not see the icon, click the “Start” button to select “My Computer”, “Computer”, or “This PC”.

Table of Contents

Rev. 20151026.10 61

Step t2) Go to the location of your Signing Certificate (example - C:\CSOS\Certificates\Jamie CSOS Sign 05-

30-2010).

Right-click the file, mouse over “Send to”, and select the drive of the transfer media.

Ejecting USB Devices: If you are using an external drive like USB Flash Drive, Jump Drive, or such types of

media, continue with the following instructions.

Look in the system tray on the bottom right of the Windows Taskbar (where the Time is showing) for the

Safely Remove Icon.

Widows XP = Windows 7 =

Step t3) Left-click the “Safely Remove” icon.

From the menu, select the transfer media drive. Windows 7

Windows XP

Table of Contents

Rev. 20151026.10 62

When you receive the message that it is safe to remove the hardware, you may remove the drive and continue to

the next step.

Go to your next computer.

If you have not installed the ROOT and SUB CA certificates from DEA’s website on this computer, please go

through the instructions on Pages 4 through 14 and return to this page when you have completed installing all

four certificates.

Step t4) Plug the USB device into the computer.

Open “My Computer” (Windows XP), “Computer” (Windows Vista/7), or “This Computer (Windows 8).

Step t5) Open your destination drive (this should be the same drive you saved your document to on your

original computer) by double-clicking the icon (in our example, we are using the C:\ Drive).

Open the subsequent folders by double-clicking them until you are in your destination folder where you want to

save the certificate (example - C:\CSOS\Certificates).

Table of Contents

Rev. 20151026.10 63

Step t6) Open “My Computer” or “Computer” in another window.

Now, open your transfer drive (in our example, we are using the E:\ Drive).

Table of Contents

Rev. 20151026.10 64

Step t7) Locate and right-click the certificate to copy.

Click “Copy” from the menu that appeared.

Table of Contents

Rev. 20151026.10 65

Step t8) Go back to the “Certificates” window on the C:\ drive and right-click the empty space.

Click “Paste” from the pop-up menu.

Table of Contents

Rev. 20151026.10 66

Your certificate has now been transferred to another computer (example below).

Repeat Step t3) through Step t8) from pages 61 through 65 starting with “Ejecting USB Devices:” until you

have transferred your certificate to all of the computers with which you wish to sign.

Once you have loaded certificates to all of your computers you may choose to delete this certificate from

your USB drive or lock up the drive in a secure limited access location for security and protection of your

signing certificate.

Table of Contents

Rev. 20151026.10 67

How to Fix Certificate Security

This section is to help you correct your CSOS Certificate Security.

***Every instruction MUST be followed precisely and without deviation to correct the Security Level***

If you have not clicked anything since “OK” button, you should see the Potential Scripting Violation warning.

Click the “Yes” button.

Now that your certificate is downloaded, follow these steps to correct the security level of your CSOS

Certificate.

Step c1) Click “Tools” from the Internet Explorer menu bar, then click “Internet Options”.

Table of Contents

Rev. 20151026.10 68

Step c2) Click the “Content” tab, then click the “Certificates” button.

Table of Contents

Rev. 20151026.10 69

Step c3) Select your CSOS certificate. Click the “Export” button.

Table of Contents

Rev. 20151026.10 70

Step c4) Click the “Next” button.

Table of Contents

Rev. 20151026.10 71

Step c5) Select the “Yes, export the private key” option.

Table of Contents

Rev. 20151026.10 72

Step c6 On the “Export File Format” screen, the radial selection should be on “Personal Information Exchange

- PKCS#12 (.pfx).

Make sure the following are checked:

“Include all certificates in the certification path if possible”

“Enable strong protection (requires IE 5.0, NT4.0 SP4 or above)”

!!!CRITICAL ATTENTION!!!

Make sure “Delete the private key if the export is successful” IS NOT CHECKED.

Click the “Next” button.

Table of Contents

Rev. 20151026.10 73

***CERTIFICATE OWNER MUST KEY PASSWORD***

Step c7) Type your signing password in both the “Password” and the “Confirm password” fields.

This is the password you created during the download of your certificate from DEA.

If you did not create a password during the download, do so at this time.

Refer to the activation notices form DEA for password complexity requirements.

Click the “Next” button.

Table of Contents

Rev. 20151026.10 74

Step c8) Click the “Browse” button.

Table of Contents

Rev. 20151026.10 75

Step c9) Go to the drive that contains the location of your CSOS folder (in most cases, it will be C:\).

Double-click the “CSOS” folder. Create the folder if it does not already exist.

Table of Contents

Rev. 20151026.10 76

Step c10) In the “CSOS” folder, double-click the “Certificates” folder. Create the folder if it does not already

exist.

Table of Contents

Rev. 20151026.10 77

Step c11) Type the following information into the “File name” field:

Your First Name

CSOS SIGN

The Expiration of the Certificate (mm-dd-yyyy)

Note that you can use dashes (-); however, you can not use slashes (/).

Our screenshot example: John CSOS Sign 11-30-2013

Click the “Save” button.

Table of Contents

Rev. 20151026.10 78

The file path and file name will populate in the “File name” field as seen below.

Step c12) Click the “Next” button.

Table of Contents

Rev. 20151026.10 79

“Completing the Certificate Export Wizard” will appear in the “Certificate Export Wizard” window.

Step c13) Click the “Finish” button.

Table of Contents

Rev. 20151026.10 80

The “Exporting your private exchange key” window will appear.

Step c14) The CryptoAPI Private Key will not have a password section if you downloaded or imported at

Medium; click the “OK” button.

Table of Contents

Rev. 20151026.10 81

Step c15) A confirmation window will appear that states, “The export was successful.”

Click the “OK” button.

Table of Contents

Rev. 20151026.10 82

Step c16) Now, the certificate must be imported.

Go to the “Desktop” in Windows, and double-click the “My Computer” icon (may appear as “Computer” in

Windows Vista/7 or “This PC” in Windows 8).

If you do not see the icon, click the “Start” button to select “My Computer”, “Computer”, or “This PC”.

Table of Contents

Rev. 20151026.10 83

Step c17) Go to the location of your Signing Certificate (example - C:\CSOS\Certificates\John CSOS Sign 11-

30-2013).

Double-click the file.

Table of Contents

Rev. 20151026.10 84

Step c18) Click the “Next” button.

Table of Contents

Rev. 20151026.10 85

Step c19) Click the “Next” button.

Table of Contents

Rev. 20151026.10 86

***CERTIFICATE OWNER MUST KEY PASSWORD***

Step c20) Check all boxes and type your password. Click the “Next” button.

Table of Contents

Rev. 20151026.10 87

Step c21) Click the “Next” button.

Table of Contents

Rev. 20151026.10 88

Step c22) Click the “Finish” button.

Table of Contents

Rev. 20151026.10 89

Step c23) Click the “Set Security Level” button.

Table of Contents

Rev. 20151026.10 90

Step c24) Click the radial button to the left of “High”.

Click the “Next” button.

Table of Contents

Rev. 20151026.10 91

***CERTIFICATE OWNER MUST KEY PASSWORD***

Step c25) Key your CSOS certificate password and click the “Finish” button.

Table of Contents

Rev. 20151026.10 92

Step c26) If the window shows “Security level set to High”, click the “OK” button.

Table of Contents

Rev. 20151026.10 93

Step c27) A confirmation window will appear that states, “The import was successful.”

Click the “OK” button.

Now that the Certificate Security is correct, go to Page 40 to test the certificate with a live order before

transporting the certificate to the other computers.

Table of Contents