{"id":799,"date":"2026-02-12T11:22:17","date_gmt":"2026-02-12T11:22:17","guid":{"rendered":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?page_id=799"},"modified":"2026-02-12T14:58:53","modified_gmt":"2026-02-12T14:58:53","slug":"managing-your-globalsign-account","status":"publish","type":"page","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/","title":{"rendered":"Step 3: Managing your GlobalSign account as part of DIP"},"content":{"rendered":"<p>We use an external vetting service called GlobalSign Atlas to establish that the primary Certificate Admin can represent your company. This is an important security measure that verifies both the company and the individual.<\/p>\n<p>You will need to set up a GlobalSign Atlas account to continue with other parts of the onboarding process.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We use an external vetting service called GlobalSign Atlas to establish that the primary Certificate Admin can represent your company. This is an important security measure that verifies both the [&hellip;]<\/p>\n","protected":false},"author":353,"featured_media":0,"parent":674,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","inline_featured_image":false,"footnotes":""},"tags":[],"class_list":["post-799","page","type-page","status-publish","hentry"],"acf":[],"semantic_search":{"post_id":799,"title":"Step 3: Managing your GlobalSign account as part of DIP","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/","categories":[],"tags":[],"content":"<article id=\"page-799\" class=\"article post-799 page type-page status-publish hentry\" role=\"article\">\n\n\t\t\n\t\t<section class=\"section\">\n\t\t\t<div class=\"centering small\">\n\t\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t\t<p>We use an external vetting service called GlobalSign Atlas to establish that the primary Certificate Admin can represent your company. This is an important security measure that verifies both the company and the individual.<\/p>\n<p>You will need to set up a GlobalSign Atlas account to continue with other parts of the onboarding process.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\n\t\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t\t\t\t\t<h2 class=\"section-title\">Links to all onboarding steps <div class=\"small-decoration\"><\/div><\/h2>\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<div class=\"grid align-horizontally\">\n<div class=\"grid-xs-12 full-width\">\n<div class=\"section-text\">\n<ul>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/accessing-dip-and-verifying-company-details\/\">Step 1: Accessing DIP and verifying company details<\/a><\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-companys-users-within-dip\/\">Step 2: Managing your company\u2019s users within DIP<\/a><\/li>\n<li>Step 3: Managing your GlobalSign account as part of DIP<\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/dip-certificates\/\">Step 4: Managing DIP certificates<\/a><\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/domain-verification\/\">Step 5: Domain verification<\/a><\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/step-6-creating-a-signing-mtls-or-combined-certificate\/\">Step 6: Creating a Signing\/mTLS certificate<\/a><\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-dip-dcp-identity-information\/\">Step 7: Managing your DIP \/ DCP IDs<\/a><\/li>\n<li><a href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-dip-message-channels\/\">Step 8: Managing your DIP Message Channels<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<p>It\u2019s important to know:<\/p>\n<ul>\n<li>it can help to\u00a0<strong>let your receptionist know an anonymous call may be received<\/strong><\/li>\n<li>this part of the vetting\u00a0<strong>can take up to 72hours<\/strong><\/li>\n<li>the DIP Manager has no control over this process.<\/li>\n<\/ul>\n<p>Whilst we are not able to influence this part of the process, you can raise a ticket on\u00a0<a href=\"https:\/\/support.elexon.co.uk\/csm\">Elexon Support<\/a>\u00a0if you have any queries.<\/p>\n<p>Follow the instructions on this page to set up your GlobalSign account or read more on\u00a0<a href=\"https:\/\/www.elexon.co.uk\/what-we-do\/about-our-services\/data-integration-platform-dip\/dip-training-and-guidance\/dip-vetting-and-validation-explained\/\" target=\"_blank\" rel=\"noopener\">how GlobalSign vetting works<\/a>.<\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t\t\t\t\t<h2 class=\"section-title\">Set up a GlobalSign Atlas account (for Certificate Admins only) <div class=\"small-decoration\"><\/div><\/h2>\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<p><strong>This activity is to be completed by Certificate Admins only.<\/strong><\/p>\n<ol>\n<li>Log in to the DIP<\/li>\n<li>Go to the Certificates tab and click on the link under GlobalSign Registration.\u00a0<a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01130619\/DIP-GlobalSign-registration-screen.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9752 \" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01130619\/DIP-GlobalSign-registration-screen-300x228.jpg\" alt=\"GlobalSign registration screen\" width=\"814\" height=\"619\" \/><\/a><\/li>\n<li>This will take you to a dedicated MHHS page on the GlobalSign website. On that page, go to the form under \u2018Get Started with Atlas\u2019.<br \/>\n<a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/09\/08205354\/DIP-atlas-page-form-merged.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10852 size-full\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/09\/08205354\/DIP-atlas-page-form-merged.png\" alt=\"Image of registration form for Global Sign Atlas\" width=\"842\" height=\"724\" \/><\/a><\/li>\n<li>Enter the Certificate Admins\u2019 name and job title.<\/li>\n<li>Enter the email address of your Primary Certificate Admin . This email address will be used for the vetting process only. You can use a generic company email which is available to multiple people to monitor but must be accessible by the Primary Certificate Admin.<\/li>\n<li>Enter a direct phone number for the Primary Admin into Contact Phone Number. This will need to be used if the primary verification is unsuccessful.<\/li>\n<li>Click \u2018I am not a robot\u2019 then submit.<\/li>\n<\/ol>\n<p>Global Sign will then contact the named individual and verify they are a current full-time employee.<\/p>\n<p><strong>What happens next?<\/strong><\/p>\n<p>You will receive two emails.<\/p>\n<ul>\n<li>a confirmation email explaining 12 steps that you will complete<\/li>\n<li>an invitation to the GlobalSign Atlas PortalThese two emails are usually received within 30 minutes of completing the GlobalSign Atlas registration form.<\/li>\n<\/ul>\n<p>These 12 steps are also explained in the end to end onboarding guide.<\/p>\n<ul>\n<li>\u00a0<a class=\"document-store-file\" title=\"DIP-E-to-E-on-boarding-guide\" href=\"https:\/\/www.elexon.co.uk\/elexondocuments\/dip\/dip-e-to-e-on-boarding-guide\/\" target=\"_blank\" rel=\"noopener\" data-filetype=\"pdf\">End-to-end onboarding guide\u00a0<span class=\"filesize\">(Size: 2.89 MB)<\/span><\/a><\/li>\n<\/ul>\n<p>You will also receive<\/p>\n<h2>Accept your invitation to the Atlas Portal<\/h2>\n<p>You will receive an invitation to access the Atlas Portal. Set up a password to continue.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01135259\/DIP-GlobalSign-website-registration-page-accept-atlas-invite.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9760\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01135259\/DIP-GlobalSign-website-registration-page-accept-atlas-invite-166x300.jpg\" alt=\"Atlas invitation screen\" width=\"396\" height=\"716\" \/><\/a><\/p>\n<h3>Approve Quotation<\/h3>\n<p>You will now have access to your Global Sign Atlas account.<\/p>\n<p>On your dashboard, items that require attention\u00a0 are shown as \u2018To Do\u2019, highlighted in yellow. Complete the following:<\/p>\n<h4><strong>Set a payment method<\/strong><\/h4>\n<p>This is only required for the GlobalSign system to function.\u00a0<strong>No actual payment is required<\/strong>, and no invoices are sent.<\/p>\n<p>You will receive an email advising your quotation is ready. Login to Atlas and click the \u2018View and Accept Quote\u2019 tile.<\/p>\n<p>The \u00a30 quotation will appear. To complete the quotation:<\/p>\n<ul>\n<li>Check the boxes to accept the quotation and Master Services Agreement.<\/li>\n<li>Click the \u2018Use this payment method\u2019 button.<\/li>\n<\/ul>\n<p>This will return you to the dashboard.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01140736\/DIP-GlobalSign-website-registration-page-accept-atlas-quote.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9761\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01140736\/DIP-GlobalSign-website-registration-page-accept-atlas-quote-300x164.jpg\" alt=\"DIP GlobalSign registration process using Atlas quote screen\" width=\"737\" height=\"403\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01140947\/DIP-GlobalSign-website-registration-page-accept-atlas-payment-method.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9763\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01140947\/DIP-GlobalSign-website-registration-page-accept-atlas-payment-method-300x156.jpg\" alt=\"DIP GlobalSign website registration page accept atlas payment method\" width=\"737\" height=\"383\" \/><\/a><\/p>\n<h4>Request Identity Profile<\/h4>\n<p>The dashboard will default to 3 tiles. Only start this step once the \u2018Request Identity Step\u2019 tile has turned yellow. This could take up to 20-30 minutes.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01142508\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9767\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01142508\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles-300x121.jpg\" alt=\"\" width=\"850\" height=\"343\" \/><\/a><\/p>\n<p>The Request Identity Profile tile now turned yellow.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01142506\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles-yellow.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9766\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01142506\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles-yellow-300x107.jpg\" alt=\"\" width=\"841\" height=\"300\" \/><\/a><\/p>\n<p>Create the Identity Profile by completing each field. These will be used to verify the name provided is a known full-time employee of the company named.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01143921\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles-form.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9770\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01143921\/DIP-GlobalSign-website-registration-page-accept-atlas-request-identity-profiles-form-300x229.jpg\" alt=\"\" width=\"745\" height=\"569\" \/><\/a><\/p>\n<h4>GlobalSign verification<\/h4>\n<p>GlobalSign will now carry out their vetting process. This can take up to 72 hours. In most cases this will less than 24 hours.<\/p>\n<p><strong>Do not proceed<\/strong>\u00a0until a verification email has been received.<\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t\t\t\t\t<h2 class=\"section-title\">Generate GlobalSign API credentials <div class=\"small-decoration\"><\/div><\/h2>\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<div class=\"section-text\">\n<p>This can only be done once you have received your verification email.<\/p>\n<p>At this point the Primary GDS Admin may want to handover the rest of the on-boarding tasks to technical staff as it involves the creation of PKI certificates. See\u00a0\u00a0<a href=\"https:\/\/www.elexon.co.uk\/what-we-do\/about-our-services\/data-integration-platform-dip\/onboarding\/managing-your-globalsign-account\/#addGSusers\">Adding GlobalSign users<\/a>\u00a0section below.<\/p>\n<p>You will need to action the following steps:<\/p>\n<ul>\n<li>create API credentials (secret and API key)<\/li>\n<li>generate CSR and KEY file<\/li>\n<li>load the CSR file into GlobalSign<\/li>\n<li>generate the CER file<\/li>\n<li>download the CER file from GlobalSign<\/li>\n<li>merge the CER and KEY files to generate the PFX certificate<\/li>\n<li>upload the GlobalSign API key and Secret with the PFX certificate into the DIP<\/li>\n<\/ul>\n<\/div>\n<div class=\"section-text\">\n<h3>Create API credentials<\/h3>\n<p>This\u00a0<strong>must be carried out by the Certificate Admin<\/strong>.<\/p>\n<p>Login to GlobalSign Atlas and select \u2018Generate API Credentials\u2019 option.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152159\/DIP-GlobalSign-website-registration-page-generate-API-credentials.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9772\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152159\/DIP-GlobalSign-website-registration-page-generate-API-credentials-300x122.jpg\" alt=\"DIP GlobalSign website dashboard screen showing generate-API-credentials tile\" width=\"767\" height=\"312\" \/><\/a><\/p>\n<p>You must select \u2018View and Copy\u2019 in the \u2018How would you like to receive your API credentials\u2019 page, then click CONTINUE.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152621\/DIP-GlobalSign-website-registration-page-generate-API-credentials-method.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9773\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152621\/DIP-GlobalSign-website-registration-page-generate-API-credentials-method-300x246.jpg\" alt=\"DIP GlobalSign website API credentials receipt method\" width=\"641\" height=\"526\" \/><\/a><\/p>\n<p>Select ACTIVE certificate to assign Internet SSL to your credentials, then click CONTINUE.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152940\/DIP-GlobalSign-website-registration-page-generate-API-credentials-active-method.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9775\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01152940\/DIP-GlobalSign-website-registration-page-generate-API-credentials-active-method-300x163.jpg\" alt=\"DIP GlobalSign website API credentials screen selecting active method\" width=\"674\" height=\"366\" \/><\/a><\/p>\n<p>Give the credential a familiar name (any text you wish), record this safely and click \u2018CONTINUE\u2019.<\/p>\n<p>Click \u2018Download key and secret as .csv\u2019 button and save file. Alternatively click both the API Key and API Secret \u2018Copy Key to clipboard\u2019 and store in a .txt file for the next stage.<\/p>\n<p><strong>You must DOWNLOAD the .CSV file<\/strong>. Once you navigate away from this page you cannot return to access this content.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01153549\/DIP-GlobalSign-website-registration-page-generate-API-credentials-copy.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9778\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01153549\/DIP-GlobalSign-website-registration-page-generate-API-credentials-copy-300x229.jpg\" alt=\"DIP GlobalSign website API credentials download option\" width=\"834\" height=\"637\" \/><\/a><\/p>\n<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t\t\t\t\t<h2 class=\"section-title\">Generate CSR and Key file <div class=\"small-decoration\"><\/div><\/h2>\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<p>You now have the API Key and Secret. The DIP requires a validated certificate in PFX format together with these API credentials. The following will be conducted outside of the DIP\u00a0<b>by someone with technical understanding of generating a certificate<\/b>.<\/p>\n<p>Select a CSR (Certificate Signing Request) generation tool and create a CSR. Two methods tried and tested are\u00a0<b>Azure Key Vault &amp; OpenSSL.<\/b><\/p>\n<h3>Using Azure Key Vault<\/h3>\n<p>Within Azure Key Vault, select Request a Certificate.<\/p>\n<p>In the \u2018<strong>Type of Certificate Authority<\/strong>\u2018 field, select \u2018Certificate issued by a non-integrated CA\u2019.<\/p>\n<p>Set the\u00a0<strong>Subject<\/strong>\u00a0to \u2018CN=onboarding_key\u2019<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11407 size-large\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/10\/23153534\/DIP-step-3-CA-screen-1024x397.png\" alt=\"\" width=\"1024\" height=\"397\" \/><\/p>\n<p>Select \u2018<strong>Advanced Policy Configuration<\/strong>\u2018.<\/p>\n<p><strong>Change the Key Size to 4096<\/strong>\u00a0within this screen only.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11408 size-large\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/10\/23154539\/DIP-step3-adv-policy-config-678x1024.png\" alt=\"\" width=\"678\" height=\"1024\" \/><\/p>\n<p>When defining your organisation\u2019s \u2018hostname\u2019 and \u2018domain\u2019 there is a limit of 35 characters to be used between those two fields. This is to keep the CN field within the X.509 certificate specification. Note that the characters can be split between the two fields in any way.<\/p>\n<p>Click\u00a0<strong>DOWNLOAD CSR<\/strong>\u00a0to save your CSR file.<\/p>\n<p>Open the CSR to check structure is correct.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01154427\/DIP-GlobalSign-website-registration-page-generate-API-credentials-certificate-structure.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9782\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01154427\/DIP-GlobalSign-website-registration-page-generate-API-credentials-certificate-structure-300x155.jpg\" alt=\"DIP GlobalSign website API credentials certificate structure\" width=\"751\" height=\"388\" \/><\/a><\/p>\n<h3>Using OpenSSL<\/h3>\n<p>Using the following:<\/p>\n<p>openssl req -new -newkey rsa:4096 -nodes -keyout apicert.key -out apicert.csr -subj \u201c\/CN=onboarding_key\u201d.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01154734\/DIP-GlobalSign-website-registration-page-generate-API-credentials-certificate-Openssl-structure.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9783\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01154734\/DIP-GlobalSign-website-registration-page-generate-API-credentials-certificate-Openssl-structure-300x113.jpg\" alt=\"DIP GlobalSign website API credentials certificate Openssl structure\" width=\"802\" height=\"302\" \/><\/a><\/p>\n<h3>Generating the correct key format for upload to the DIP<\/h3>\n<p>The Certificate Admin must return to the GlobalSign Atlas system to complete the next stage of certificate preparation for the DIP.<\/p>\n<p>If you have appointed a new Certificate Admin into the Atlas account, they can complete the following steps.<\/p>\n<ul>\n<li>sign in to the Atlas system. Open your Dashboard and select \u2018Generate mTLS Certificates\u2019<\/li>\n<li>on the next screen select \u2018Directly via the API\u2019<\/li>\n<li>then select the API Credentials just made using the \u2018Familiar Name\u2019<\/li>\n<li>paste the CSR generated into the space provide then click CONTINUE<\/li>\n<\/ul>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01155459\/DIP-GlobalSign-website-registration-page-generate-API-credentials-paste-CSR.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9786\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01155459\/DIP-GlobalSign-website-registration-page-generate-API-credentials-paste-CSR-300x164.jpg\" alt=\"Example of pasted CSR\" width=\"888\" height=\"485\" \/><\/a><\/p>\n<p>On success, use the button to copy the certificate, paste into text file.<\/p>\n<h3>Create a PFX Certificate for Upload to the DIP<\/h3>\n<p>The output from the GlobalSign system requires the key to be converted to PFX format. This is completed using OpenSSL<\/p>\n<p>Complete the certificate request using the downloaded file.<\/p>\n<p>Export the certificate and its private key, to a pfx file, ensuring no password is specified using your OpenSSL tool.<\/p>\n<h3>Azure Key Vault version<\/h3>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/09151633\/DIP-GlobalSign-Azure-Key-Vault-version.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9841\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/09151633\/DIP-GlobalSign-Azure-Key-Vault-version-300x146.jpg\" alt=\"Diagram of GlobalSign Azure Key Vault version\" width=\"754\" height=\"367\" \/><\/a><\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t\t\t\t\t<h2 class=\"section-title\">Add GlobalSign users (optional) <div class=\"small-decoration\"><\/div><\/h2>\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<p>At this point of the process you may wish to assign additional Certificate Admins to complete the upcoming sections as more technical knowledge is required to complete the next onboarding steps.<\/p>\n<p>This could be someone from the DCP or a third party technical person.<\/p>\n<p>As well as adding the Certificate Admin to the DIP they should also be added as a new User Admin within GlobalSign.<\/p>\n<p><strong>Please note<\/strong>\u00a0 that additional Certificate Admins are not mandatory at this point \u2013 you can continue through the process should you wish.<\/p>\n<h3>Assign a new Certificate Admin to GlobalSign Atlas account<\/h3>\n<p>Click the profile icon in the top-right corner. Select \u2018Account Settings\u2019 and then \u2018Users\u2019 to obtain the new user ADD screen.<\/p>\n<p>Select \u2018Add an Atlas Admin User\u2019 and add your new Cert Admin to the account.\u00a0This will result in a \u2018New User Registration\u2019 email being sent to that person.<\/p>\n<p><a href=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01160800\/DIP-GlobalSign-adding-new-user.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9789\" src=\"https:\/\/assets.elexon.com\/wp-content\/uploads\/2025\/05\/01160800\/DIP-GlobalSign-adding-new-user-300x80.jpg\" alt=\"DIP GlobalSign adding new user\" width=\"953\" height=\"254\" \/><\/a><\/p>\n<p>If you have any issues with Global Sign certificates or vetting, you can contact Global Sign directly at\u00a0<span data-teams=\"true\"><a id=\"menurdop\" class=\"fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn\" title=\"mailto:support@globalsign.com\" href=\"mailto:support@globalsign.com\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Link support@globalsign.com\">support@globalsign.com<\/a><\/span><\/p>\n<h3>Managing users in GlobalSign Atlas portal<\/h3>\n<p>When moving to Production, DIP Users may wish to \u2018cleanse\u2019 the users in the Atlas portal to accurately reflect the user base that will go into PROD.<\/p>\n<p>The GlobalSign Atlas portal falls outside the scope of DIP Manager therefore as the primary Certificate Admin (the individual who is responsible for creating the Atlas Portal and initiating organisational vetting) it is your responsibility to manage what users have access.<\/p>\n<p>We recommend liaising with your internal team\/ DCP to discuss who has appropriate permissions. This can be done via the users setting which can be found in the top right corner under account settings.<\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t<section class=\"section\">\n\t\t<div class=\"centering small\">\n\t\t\t  \n\t\t\t<div class=\"section-text\">\t\t\n\t\t\t\t<p><a class=\"button\" href=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/dip-certificates\/\">Next step:\u00a04. Managing DIP certificates<\/a><\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\n<\/article> <!-- MAIN ARTICLE ENDS -->","s3_url":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.1 (Yoast SEO v27.1.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Step 3: Managing your GlobalSign account as part of DIP - DIP<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Step 3: Managing your GlobalSign account as part of DIP\" \/>\n<meta property=\"og:description\" content=\"We use an external vetting service called GlobalSign Atlas to establish that the primary Certificate Admin can represent your company. This is an important security measure that verifies both the [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/\" \/>\n<meta property=\"og:site_name\" content=\"DIP\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-12T14:58:53+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/\",\"url\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/\",\"name\":\"Step 3: Managing your GlobalSign account as part of DIP - DIP\",\"isPartOf\":{\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website\"},\"datePublished\":\"2026-02-12T11:22:17+00:00\",\"dateModified\":\"2026-02-12T14:58:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DIP training &amp; guidance\",\"item\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Onboarding the Data Integration Platform\",\"item\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Step 3: Managing your GlobalSign account as part of DIP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website\",\"url\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/\",\"name\":\"DIP\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Step 3: Managing your GlobalSign account as part of DIP - DIP","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Step 3: Managing your GlobalSign account as part of DIP","og_description":"We use an external vetting service called GlobalSign Atlas to establish that the primary Certificate Admin can represent your company. This is an important security measure that verifies both the [&hellip;]","og_url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/","og_site_name":"DIP","article_modified_time":"2026-02-12T14:58:53+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/","url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/","name":"Step 3: Managing your GlobalSign account as part of DIP - DIP","isPartOf":{"@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website"},"datePublished":"2026-02-12T11:22:17+00:00","dateModified":"2026-02-12T14:58:53+00:00","breadcrumb":{"@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/managing-your-globalsign-account\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/"},{"@type":"ListItem","position":2,"name":"DIP training &amp; guidance","item":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/"},{"@type":"ListItem","position":3,"name":"Onboarding the Data Integration Platform","item":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/dip-training-and-guidance\/onboarding\/"},{"@type":"ListItem","position":4,"name":"Step 3: Managing your GlobalSign account as part of DIP"}]},{"@type":"WebSite","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website","url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/","name":"DIP","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/users\/353"}],"replies":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/comments?post=799"}],"version-history":[{"count":3,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/799\/revisions"}],"predecessor-version":[{"id":825,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/799\/revisions\/825"}],"up":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/674"}],"wp:attachment":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/media?parent=799"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/tags?post=799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}