Cert Update 0729

8/9/2019 Cert Update 0729

http://slidepdf.com/reader/full/cert-update-0729 1/24

Intuit PSD SSL Certificate Changes

On July 26, 2010, at 11:00pm PST, Intuit PSD will be updating SSL certificates on some of its

payment processing servers. The servers affected will be those with URLs starting with

https://wwws.echo‐inc.com. Some merchants who have custom applications that utilize services on

these servers may be affected and will need to download and install the latest SSL certificates. Whether

or not the merchant will need to manually install the new certificates depends largely on how the client

application is designed.

If you find it necessary to manually install the new certificates, you can download the

certificates by following the steps below. (The steps for installing the downloaded certificates will

depend on the application. Please consult your IT department or software vendor for more information

about updating SSL certificates):

If you

have

questions

or

need

assistance

with

this

process

please

contact

Customer

Support

at

1‐800

‐

262‐3246. We are open 24 hours a day to serve you. If you have an account manager please contact

them directly.

Thank you for your immediate attention to this matter.

(1) In Internet Explorer, enter the following URL:

https://wwws.echo‐inc.com/

NOTE: The screen captures presented below are for illustrative purposes only and may or may not

represent the actual screens merchants will see.

(2) Click on the yellow lock next to the URL:





(3) Click on the “View certificates” link.



(4) Click on the “Details” tab.



(5) Click the “Copy to File…” button.

(6) Click the “Next” button.





(7) Make sure “DER encoded binary X.509 (.CER)” is selected and click the “Next” button.

(8) Find a directory to save the certificate and give it a name (e.g. IntuiPSD.CER).



(9) Click the “Finish” button.

(10) Click the “Finish” button.



The intermediate CA certificate will also be changing. Follow the steps below to download the

intermediate CA certificate.

(1) From the “Certificate” popup window which was opening in the steps above, click the

“Certificate Path” tab.



(2) Select the “Verisign Class 3 Secure Server CA – G2” certificate and click the “View Certificate”

button.



(3) Click the “Details” tab.



(4) Click the “Copy to File…” button.




(6) Make sure “DER encoded binary X.509 (.CER)” is selected and click the “Next” button.



(7) Find a directory to save the certificate and give it a name (e.g. IntuiPSD‐Inter.CER).




(9) Click the “Finish” button. At this point, you should have both two certificates (IntuitPSD.cer and

IntuitPSD‐Inter.cer) downloaded to your disk.

Manually updating the certificates in your application will vary depending on the application and

language in which it was coded.

If the application is written in Java, the certificates can be loaded into your JVM by using the keytool.

/opt/java/jre1.5.0_18/bin/keytool -alias IntuitPSD -import –keystore \

/opt/java/jre1.5.0_18/lib/security/cacerts -trustcacerts \

-file IntuitPSD.cer

/opt/java/jre1.5.0_18/bin/keytool -alias IntuitPSD-Inter \

-import –keystore /opt/java/jre1.5.0_18/lib/security/cacerts \

-trustcacerts -file IntuitPSD-Intuit.cer



For more information about using keytool, see

http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html

If the application is written a Windows based technology (not Java), then the certificates can be

loaded into the computer account using the Microsoft Management Console ‘Certificates’ Snap‐in.

Managing a Computer's Certificates

The Certificates MMC snap‐in can be used to manage a computer's certificates.

1. Start the MMC by clicking Run on the Start menu. Then type in mmc.exe in the text box and click

OK.

2. On the Console menu, click Add/Remove Snap‐in.



3. Click Add to add a snap‐in to the current console.



4. Select ‘Certificates’ and then click Add.



5. Select the Computer account option and then click Next.



6. Select Local computer if managing certificates on the local machine the application runs on; if

managing certificates on a remote computer, select the Another computer option. Type the

name of the computer you want to manage (or click Browse to select from a list). Click Finish.

7. Close the Add Standalone Snap‐in dialog box, and then click OK to close the Add/Remove Snap‐

in dialog

box.

You

have

now

created

the

console

with

which

to

manage

your

computer's

certificates.



8. On the Console menu, click Save As. In the File name text box, type a name for this console, and

then click Save.



Importing Certificates Using the MMC Console Created in the Steps Above

You may install or restore certificates and the corresponding private keys from a certificate file.

1. Open the MMC Certificate Console created in step 8 on page 19

2. For the certificate saved as

IntuitPSD.cer

in

step

9 on

page

6,

expand

the

‘Certificates’

folder

tree, right click on the ‘Trusted Root Certificates’ folder and choose All Tasks then Import.

3. The Certificate Import Wizard launches. Click Next.

4. In the File name text box, type the name of the certificate file that you want to import (for the

sake of this document, the name of the file in question ‘IntuitPSD.cer). Alternatively, you can

find the file by clicking Browse.

5. After choosing a certificate file to import, click Next.

6. On the next page, select the destination where you'd like to store the certificate (this will

automatically be

set

to

‘Trusted

Root

Certification

Authorities’.

Click

Next.



7. The next wizard page contains summary information about the file that you are importing. Click

Finish to import the file. The certificate(s) are now ready for use by the system.

8. For the intermediate certificate saved during step 9 on page 13 as IntuitPSD‐Inter.cer, repeat the

certification steps as above only start the wizard from the ‘Intermediate Certification Authorities



folder’

Documents

Cert Update 0729