SwissSign

NOTE: SwissSign now offers a new MPKI that uses a different URL. NoSpamProxy automatically uses this URL after you have added SwissSign again as a provider for key requests.

  1. Go to Identities > Key enrolment > Key enrolment provider.
  2. Click Add and select SwissSign as the provider.
  3. Select the operator certificate.
  4. Enter the account name and the product name and select the product type.

    NOTE: For the account name and for the product, please use the data that you have received from SwissSign. Note that these dates may differ from old information.


  5. Click Next.
  6. Determine whether you want to publish your key to Open Keys. See Using Open Keys.
  7. Click Finish.

TIP: Together with our colleagues from SwissSign, we have created the following document, which lists all the points you need to consider when integrating a Managed PKI from SwissSign into NoSpamProxy: Notes on using NoSpamProxy with SwissSign certificates

SwissSign Silver ID products supported by NoSpamProxy

NoSpamProxy currently supports the following Silver ID products:

Silver certificates without state, organisation and state field

  • Name in the order process: Email ID Silver, email address validated (web interface or partner application)
  • From NoSpamProxy Version: 13.2.21230.1449

NOTE: Before the above version, the following error message was displayed: Unconsumed SDN (i.e.: SDN attributes not needed and not utilised; please remove them and resubmit your request): o=[...].

Unsupported products

The following Silver ID product is not supported:

Silver certificates with state field

  • Name in the order process: Email ID Silver, email address validated, organisation, canton/province, state (only partner application)

NOTE: Take this into account in the procurement process at SwissSign and only order the supported products. If you have ordered the wrong product, you can request the change from SwissSign using this form.

Silver certificates without state field

  • Name in the order process: Email ID Silver, email address validated, organisation, state (only partner application)
  • From NoSpamProxy Version: 13.2.21111.1701

NOTE: Before the above version, the following error message was displayed: Unconsumed SDN (i.e.: SDN attributes not needed and not utilised; please remove them and resubmit your request): state=[...].

Notes on SwissSign Gold products

NOTE: If certificates are to be requested for general or system mailboxes, a pseudo: must be inserted before the display name (general name/Common Name/CN). This cannot be automated by NoSpamProxy, so this information comes from Active Directory or LDAP. This information should be provided at the beginning and ideally as a first name. To submit the correct order in the CN, use NoSpamProxy version 13.2.21111.1701 or higher