Personal Certificate Request Instructions – Citizens of all other countries

For a downloadable version of these instructions, please click here.

Certificate Request Instructions for citizens of all other Countries

1. Online Application

  1. IMPORTANT: Each Subscriber must perform the Online Application for themselves. You may NOT make an Online Application for another individual. This is grounds for immediate revocation of your certificate. (And any fees paid will not be returned.). You must use the same work station you used for the online application process, when retrieving your certificate.
  2. By the end of the online application process you will have: trusted the U.S. Government ECA Root and the ORC ECA Intermediate Certification Authority, generated a set of keys for your certificate(s) and assigned a password to protect the private key, and printed a customized, four page, certificate request form for each certificate that you need.
  3. You will need a work station with a FIPS 140-1/2 Level 1 cryptographic compliant web browser. This includes Internet Explorer 5.5 and above, Netscape 4.7 and above and Firefox 1.5 and above.
  4. ORC recommends, that a back-up copy of your Enrollment Private Key be made as soon as you submit your request – see the Creating a Backup (Export) Copy of your Enrollment Private Key instructions for the web application used during the request process. ORC recommends that you create a back-up copy of your key pair once issued – see the Creating a Backup (Export) Copy of Your Certificate instructions for the web application used during the request process. This needs to done in case of loss of certificates due to human error, network, operating system, or computer changes. If you need further assistance, please contact the help desk at 1-800-816-5548 or ecahelp@orc.com. Any operational copy of the private key must be protected in accordance with the ORC ECA CPS section on Private Key Protection.

2. Identity Verification

If you are having the Identity Verification performed outside of the US, then you will need to present the following in person, to an employee of the U.S. Department of Defense (US DoD) who has been AUTHORIZED (for this purpose) under Section 11 of the DoD ECA Certification Policy (available here: https://dl.dod.cyber.mil/wp-content/uploads/eca/pdf/unclass-eca_cp_v4-5_final_signed.pdf ).

  1. The request form generated during the online application process containing your request ID.
  2. Two forms of photo identification. One of these must be a valid current passport issued by your government of citizenship. The second photo ID can be a driver’s license or an official company, or institutional, issued photo identity card or badge. (NOTE: A Proof of Organizational Affiliation letter does NOT replace one of the required photo IDs.)
  3. Proof of Nationality – This is taken care of with presenting your passport as one of your two photo IDs.
  4. Form of payment (Purchase Order Number, Check, Credit Card).
  5. Proof of Organizational Affiliation. If you are using a company issued ID, as one of your two forms of photo identification, then this will also work as your Proof of Organizational Affiliation. If you are not submitting a copy of a company issued photo ID, then you will need to submit a letter on company letterhead, signed by a Duly Authorized Company Representative, stating that you are an employee of that organization. (exp. Individual’s Proof of Organizational Affiliation Letter.) (NOTE: A Proof of Organizational Affiliation letter does NOT replace one of the required photo IDs.)
  6. For jurisdictions other than the United States, see Appendix E of the ORC ECA CPS.

3. Certificate Delivery

  1. You will receive a Certificate Issuance Notification email. This email will tell you how to import, test, and back-up your certificate(s).
  2. You must use the same work station you used for the online application process, when retrieving your certificate.
  3. As stated in the Online Application Section above, ORC recommends, that a back-up copy of your Enrollment Private Key be made as soon as you submit your request – see the Creating a Backup (Export) Copy of your Enrollment Private Key instructions for the web application used during the request process. ORC recommends that you create a back-up copy of your key pair once issued – see the Creating a Backup (Export) Copy of Your Certificate instructions for the web application used during the request process. This needs to done in case of loss of certificates due to human error, network, operating system, or computer changes. If you need further assistance, please contact the help desk at 1-800-816-5548 or ecahelp@orc.com. Any operational copy of the private key must be protected in accordance with the ORC ECA CPS section on Private Key Protection. ORC is not responsible for the password or changes on your system that remove or corrupt the certificate private key.

4. Trust CAs

You will need to Trust the ECA Root Certificate Authority and the ORC ECA Root Certificate Authority. This only needs to be done once (unless there is a notice telling you that an update was made). A browser check will be conducted sending you to the appropriate page. Please go to the Trust Green page.

If you HAVE already trusted both the ECA Root Certificate Authority and the ORC ECA Certificate Authority, then please Continue Blue to the certificate selection page.