= Registering a Type 3 Host Certificate for CommercePlus =

<<TableOfContents()>>

-----


 * These instructions are to register a new Type 3 Device / Host certificate for Australian Border Force and to provide the details to Commerce Plus for either Importnet, Exportnet or Managed Mail.

== Purchasing the Type 3 Certificate ==

 * Go to the https://my.gatekeeper.digicert.com/manage/enrolments - '''Please make sure you are using Internet Explorer and not Chrome, Safari or Edge'''
 * Click on '''New Certificate Enrolments'''

   {{attachment:Type3_Cert_01.png||width=1000}}

 * Click on the Gatekeeper link

   {{attachment:Type3_Cert_02.png||width=1000}}

 * Click on '''Device'''

   {{attachment:Type3_Cert_025.png||width=1000}}

 * Click on '''Begin Device Enrolement'''

   {{attachment:Type3_Cert_03.png||width=1000}}

 * Complete the company details.
 * The '''Certificate Email''' must match the email address you have been provide with from us, for example it maybe be similar to acs.customer@commerceplus.com.au
 * Click '''Continue''' 

   {{attachment:Type3_Cert_04.png||width=1000}}

 * Double check the details and ensure the '''Certificate Email''' is correct, as this can't be changed later.

   {{attachment:Type3_Cert_05.png||width=1000}}

 * Click '''Return to your Account Page'''

   {{attachment:Type3_Cert_06.png||width=1000}}

 * Click on '''Manage Account in My Gatekeeper''' - this is at the bottom of the page.

   {{attachment:Type3_Cert_07.png||width=1000}}

 * Click on '''Manage Certificates'''

   {{attachment:Type3_Cert_08.png||width=1000}}

 * Click on '''New Certificate Enrolments'''

   {{attachment:Type3_Cert_09.png||width=1000}}

 * Click on the ID matching the certificate you are registering, it will be the "Device G4"

   {{attachment:Type3_Cert_10.png||width=1000}}

 * Triple check the details are correct and then click on '''Approve'''

   {{attachment:Type3_Cert_11.png||width=1000}}

 * Select the payment method and click '''Continue'''
 * Double check the information and if correct tick the declaration and '''Approve and Purchase'''

   {{attachment:Type3_Cert_13.png||width=1000}}

== Installing the Type 3 Certificate ==

 * At this point you will receive and email on how to install the certificate.
 * Click on the link and make sure it opens in Internet Exporter and not any other type of browser.

   {{attachment:Type3_Cert_14.png||width=1000}}

 * Enter the code in the email and click '''Begin'''

   {{attachment:Type3_Cert_15.png||width=1000}}

 * Check the details and click '''Continue'''

   {{attachment:Type3_Cert_16.png||width=1000}}

 * Enter the code you get from the SMS and click '''Continue'''

   {{attachment:Type3_Cert_17.png||width=1000}}

 * Click the tickbox and '''Continue'''

   {{attachment:Type3_Cert_18.png||width=1000}}

 * Click '''Install CA''' at the bottom of the page.

   {{attachment:Type3_Cert_19.png||width=1000}}

 * Click '''Allow'''
 
   {{attachment:Type3_Cert_20.png||width=1000}}

 * Click on '''OK'''

   {{attachment:Type3_Cert_21.png||width=1000}}

 * Check '''automatic''' and click '''Next'''

   {{attachment:Type3_Cert_22.png||width=1000}}

 * Click '''Finish'''

   {{attachment:Type3_Cert_23.png||width=1000}}

 * Assuming you don't use a dongle click '''No''' and '''Continue'''

   {{attachment:Type3_Cert_24.png||width=1000}}

 * Click on '''Yes''' 

   {{attachment:Type3_Cert_25.png||width=1000}}

 * Click on '''Begin Test'''

   {{attachment:Type3_Cert_26.png||width=1000}}

 * The installation if Complete.

   {{attachment:Type3_Cert_27.png||width=1000}}

== Backing Up / Exporting the Type 3 Certificate ==

 * Click on '''Settings''' within Internet Explorer
 * Click on '''Internet Options'''
 * Click on '''Content tab'''
 * Click on '''Certificates'''

   {{attachment:Type3_Cert_28.png||width=1000}}

 * Select the new '''Certificate''' and click '''Export'''

   {{attachment:Type3_Cert_29.png||width=1000}}

 * Select '''Yes''' and click '''Next'''

   {{attachment:Type3_Cert_30.png||width=1000}}

 * Select '''Personal''' and ensure;
  * 'Include all certifcates...
  * Do not delete private key
  * Do not set export all extended properties
  * Enable certificate privacy
 * Click '''Next'''

   {{attachment:Type3_Cert_31.png||width=1000}}

 * Set a password and click '''Next''' , please make it a password you are happy to share with Commerce Plus

   {{attachment:Type3_Cert_32.png||width=1000}}

 * Save the key and then email the file to Commerce Plus (support@commerceplus.net.au) , we will obtain the password for the key over the phone.

   {{attachment:Type3_Cert_33.png||width=1000}}

------

== Add the Certificate to ICS Identity Manager ==

 * Open Internet Explorer, making sure not to use Chrome, Safari or Edge
 * Click on Internet Explorer Settings
 * Click on '''Internet Options'''

   {{attachment:ABF_Cert_02.png||width=1000}}

 * Click on '''Content''' and '''Certificates'''

   {{attachment:ABF_Cert_03.png||width=1000}}

 * Highlight the new certificate and click on '''Export'''

   {{attachment:ABF_Cert_04.png||width=1000}}

 * Click '''Next'''
 * Click '''No, do not export the private key'''
 * Click '''Next'''

   {{attachment:ABF_Cert_06.png||width=1000}}

 * Click on '''DER'''
 * Click '''Next'''

   {{attachment:ABF_Cert_07.png||width=1000}}

 * Select to save the file and click '''Save'''
 * Click '''OK'''
 ^ Click '''Finish'''

   {{attachment:ABF_Cert_08.png||width=1000}}

 * Go to the ICS website in Internet Exporter https://www.ccf.customs.gov.au/pkmslogin.form
 * Click on '''Login to Cargo Interactive'''

   {{attachment:ABF_Cert_01.png||width=1000}}

 * Click '''I Agree'''
 * Click on your AO certificate '''not''' the device certificate
 * Click '''OK'''

   {{attachment:ABF_Cert_12.png||width=1000}}

 * Click on '''Identity Manager'''

   {{attachment:ABF_Cert_13.png||width=1000}}

 * Assuming the Type 3 is not already installed click on '''Browse''', find the *.cer file and then click '''Upload Certificate'''

   {{attachment:ABF_Cert_09.png||width=1000}}

 * Check the new certificate has been installed and click on the house Icon

   {{attachment:ABF_Cert_10.png||width=1000}}

 * The new certificate is ready to go and will be showing up on the home page.

   {{attachment:ABF_Cert_11.png||width=1000}}