To support the PASI PASI Security framework, before any system can connect to the PASI Core, a valid digital certificate must be registered with the PASI Core. Registration of a certificate enables a PASI Client to:

• Access a specific set of PASI Core Environments (e.g. Beta, Conformance, or Production),
• Represent a specific set of Organizations, typically a specific School Authority or School, and
• Access specific PASI Core Services based on the assignment of PASI Client System Role.

To obtain and register a digital certificate, following the steps below.

All requests for new security certificates or to register an existing security certificate must be done using Alberta Education’s extranet Certificate Registration site. To access this site use the following URL: https://extranet.education.alberta.ca/Pasi.CertificateRequest/

There are two options that can be used to request a new security certificate or register an existing security certificate. Chose the option based on the user’s organization:

• Submit PASI Client certificate request and registration for Software Provider
• Submit PASI Client certificate request and registration for School or School Authority

Once the above selection has been made, security certificate request details must be specified. Details include:

• Certificate Request Type

• Requesting Software Provider Information (for Software Provider Requests only)
  • Software Provider Name
  • Software Provider City
  • Province
  • Software Provider Country
  • School Authority Codes

• Requesting School Information (for School Requests only)
  • School Name
  • School Code
  • Environment Information (UAT or Production)

• Requesting School Authority Information (for School Authority Requests only)
  • School Authority Name
  • School Authority Code
  • Environment Information (UAT or Production)

• Base 64 Encoded Certificate (Exiting Certificate Only)

• Requestor Contact Information
  • Requestor Contact Name
  • Requestor Contact Title
  • Requestor Contact Email
  • Requestor Contact Phone Number

• Software Product Information
  • Software Product Name
  • Software Version Number

• Certificate Export Option (New Certificate Only)

• Questions

Once the above details have been entered, the request is submitted and an automated email is sent to PASI Business Support team notifying them that a security certificate request has been submitted and is waiting for approval.

For detailed security certificate request instructions see the following document: https://extranet.education.alberta.ca/Pasi.CertificateRequest/PASI%20Client%20Certificate%20Request%20and%20Registration%20Guide.pdf

The review, approval, and generation of all security certificate requests must be done using Alberta Education’s extranet Certificate Approval site. The PASI Business Support team will review all security certificate requests and contact the security certificate requestor to determine required and allowed PASI service functionality (roles). Once roles have been determined, the PASI Technical Support team will setup the new security certificate using information contained within the emailed security certificate request including the following:

• Certificate Type (Software Vendor, School/School Authority)
• Requestor/Client Name
• Requestor/Client Description
• Certificate Effective and Expiry Dates
• Certificate Details
• Allowed Roles
• Provider Associations

Once the security certificate has been setup, the security certificate request will be approved. The PASI Technical Support team will then send an approved security certificate email to the security certificate requestor. The approved security certificate will be attached to the email.

Installation of approved security certificates can be done using the following Alberta Education certificate installation site. To access this site use the following URL: http://education.alberta.ca/pki/

There are three steps in the security certificate installation process.

1. Copy the approved Certificate to the required machine(s). Approved security certificate will be attached to the email received from the PASI Business Support team.
2. Configure the machine(s) to accept Alberta Education security certificates using installation wizards:
   • Alberta Education Root Authority Certificate
   • Trusted Root Certificate Authorities
3. Install the approved certificate.

For detailed security certificate installation instructions, see the following document: https://extranet.education.alberta.ca/Pasi.CertificateRequest/PASI%20Client%20Certificate%20Installation%20Guide.pdf