Knowledge Base

Learn how to set up your DigiCert-provided hardware token for Document signing.

Please make sure you meet these prerequisites:

• DigiCert-provided hardware token: SafeNet 5110 CC, SafeNet 5110 FIPS, or SafeNet 5110+ FIPS.
• Access to your certificate's Order details page in CertCentral.
• Document Signing certificate order number.
• Administrator permissions on your computer.
• Secure password manager. See Passwords 101.

Install your Document Signing certificate on your eToken 

1. In your CertCentral account, in the left main menu, go to Certificates > Orders. 
   
   If you do not see the above in your account, please follow these instructions:
   In your CertCentral account, in the left main menu, click on My Digital Trust Products > Certificates
   
   
2. On the Orders page, select the certificate's order number.
   
   If you do not see the above in your account, please follow these instructions: 
   On the Certificates page, select the certificate's order number.
   
   
3. On the certificate's Order details page, under Certificate status you will see the section “What do you need to do”

• Step One: Install the SafeNet Authentication client and initialize your token. 
• Step two: Download and install DigiCert Trust Assistant
• Step Three: Install your certificate on your DigiCert provided hardware token

Step One: Install the SafeNet Authentication client and initialize your token. 

Please refer to the following guides on how to install the SafeNet Authentication Client:

• How to Install the SafeNet Drivers and Client Software (Windows)
• How to download SafeNet Authentication Client

Once you have installed the SafeNet Authentication Client, you proceed to initialize your eToken. 

1. Plug your eToken directly into your machine. 
2. Open the SafeNet Authentication Tool. 
3. Click on the Gear Icon in the top right corner, right click on your token and click on Initialize Token… 
   
4. Select Configure all initialization settings and policies and click Next >  
   
   
   
   
5. Select Use factory default administrator password and click Next > 
   
   
   
   
6. Complete the Password Settings Page and click Finish. 
   
   
   
   
7. A Warning message will pop up, read it and click OK.
   
   
   
   
   
8. Initialization successful. Click OK. 

Step two: Download and install DigiCert Trust Assistant

1. Download the DigiCert Trust Assistant. You will find the download link in your CertCentral account on the certificate page.
2. Once you have downloaded the DigiCert Trust Assistant, double click on the file. 
3. Click on I Agree. 
   
   
4. Choose Who should this application be installed for and click Next >
   
   
5. Browse to where you'd like to store the DigiCert Trust Assistant and click Install. 
   
   
6. You have successfully installed the DigiCert Trust Assistant. Click Finish. 
   
   

Step Three: Install your certificate on your DigiCert provided hardware token 

Return to your Cert Central account and navigate to your certificate’s order page. Click on Install the certificate and follow the instructions. 

1. Ensure that your token is plugged, and the DigiCert Trust Assistant is open.
2. In CertCentral, on the order page click on Get Token list and choose your token by clicking on the serial number. Click on Generate CSR and Install certificate. 
   
   
   
3. A Digital Trust Assistant window will pop up asking you to provide the token password. 
   
   
4. A pop-up box will appear on the installation window stating that the certificate has been successfully installed. 
   
   

Password 101

The SafeNet eToken uses the following passwords:

• Administrator Password: 
  The default Administrator Password is "0" 48 times as provided by the manufacturer. If "this" password is lost, you are permanently locked out of the eToken and must purchase a new one. DigiCert does not set up this password.
• Token Password:
  This password is used to access the eToken certificate store. If lost, you can reset the eToken and reinstall the certificate.
• Personal Unlocking Key (PUK): Default PUK is 000000. 
  DigiCert does not use the PUK in our process.
  

Minimum Password Requirements:

• Your password should contain at least 8 characters.
• Your password should include both upper-case characters and lower-case characters as well as numerals and special characters (for example: !, $, %, #).
• The minimum password length and character requirements apply to both the Token password and the Administrator password.

Sign Documents

You're done! You can begin using your DigiCert Document Signing Certificate to sign documents. 
For instructions on how sign documents with your document signing certificate, see the topics below.

• Sign Microsoft Office Documents

• Sign a document in Adobe Acrobat

• Sign OpenOffice and LibreOffice documents

  For instructions on how to set up your token and to install and rekey your document signing certificate, scroll to the end of our TLS/SSL, code signing, document signing certificates' support page.