At IU, how do I obtain an SSL certificate for my web server?

All Indiana University web servers must operate in secure mode if they display or accept sensitive data. Secure web servers are addressed with the prefix https, while web servers operating in nonsecure mode use http. In order for a web server to operate in secure mode, the server's administrator must obtain and install an SSL certificate signed by a trusted certificate authority (CA).

The University Information Policy and Information Security Offices have partnered with Thawte, a commercial CA, to deliver SSL certificates to the IU community at discounted prices. This service is called the IU Certificate Authority (IUCA).

Additionally, the IUCA provides SSL server certificates for testing/staging/development purposes, as well as for services internal to the university that have a limited number of users, at no cost (restrictions apply).

For more information, see:

When you receive the SSL certificate, use your web server's configuration/administration interface to install the certificate and operate your server in secure mode. For help with building and maintaining a web site at IU, see the IU Webmaster page at:

Also see:

• At IU, what options does my department have for selling items from its web site, and whom do we contact about support issues?
• What are signing and root (digital) certificates of authenticity?