如何从Seacert公司订购Marlin IPTV-ES Keys

前言

 

    前提是加入MTMO组织，成为Marlin组织一份子；其次，Seacert公司要得到MTMO的授权，允许Seacert公司给公司分发Marlin IPTV keys. 这两个过程需要签署两份合同，一份是同MTMO公司的(要完成自我认证问卷)，另一份是同Seacert公司的；

通常费用构成：

1、  类似开户费  5000美金 一次性费用；

2、  年费 每年2万美金 ，第一年免年费；

3、  单台License费用 0.045 美金 ；

4、  安全操作费用 500美金 ；

5、  手续费 200美金 ；按订单收取 ；

 

接下来就是通过Seacert公司的系统SOMA https://soma.seacert.com/soma/app/，进行操作了；

帐号密码为 ，在此略去几个字；

 

如何激活帐号，如何补充完成Billing and Notification信息，略过；这里有一个地方特别注意， 就是具体公司Title的信息，后续的开发票会用到；这里还发生一个让人非常沮丧的故事，原来以XX国际营销Title，对方开过发票，发现走这个Title付款，会额外支付80多美金。后来又通知改成XX国际营销新家坡控股公司，费了好一番周折，对方同意重开发票；但财务系统 Expenses Manage System提交审批的表单里，填写的还是国际营销Title，而此时这个表单已经审批完成了；若采用新的发票重新填写一份新的订单，则又要花很长时间，各个环节领导审批后才能支付；而日本LD20项目时间紧迫，已经来不及重新走审批流程了；所以，又重新以Seacert公司确认，原来的以国际营销Title开的发票是否有效，得到肯定的消息后，又回到原点，未能为了节约那80多美金；

 

1 提交申请订单表

  这里面的字段基本上都是选择的；其中Purchase Order, 填写一个有意义好记忆的字符串即可；Access Code 用于后续签名时用到的；

  重要的是，这里面会要求挂一份附件，这个附件是订单生成工一个订单管理证书；要用SeaCertKey Tool 来生成（需要在SOMA系统里下载）；

  a.创建一个订单管理的证书工程，类型为订单管理证书；注意工程名，是一个虚拟名称，随意好记即可；但公司名称，要跟你在SOMA里看到的保持一致；会让你生成CSR，一旦生成后，并提交到SOMA 系统里的OM后，你的工程、CSR名称，都不要改了；同时，作好工程保存；将来会用到；

提交完申请后，会收到签名确认邮件链接；打开链接，里引导你一步步完成签名，表明你提交的订单是正式的，完整的；此时订单为Signed状态；如果SeaCert确认后无误后，会将状态更新为Accepted状态；然后会生成一份对方添加了私钥证书文件（我的理解），后续解密Marlin Key时会用到；

 

原邮件步骤是：

Seacert invites you to start using the Seacert Order ManagementApplication (SOMA). This is the process for placing orders with Seacert.

 

1.  Seacert will add youremail to the system as an authorized employee for your company.

 

2. You will receive an invitation email shortly with a link to theSOMA system. Click the link and select a password.

  a. You are set up as theAdministrator for you company. You can add additional employees to use SOMA byentering their name and email. You may assign them Administrator privileges (ornot). Administrators are notified when Billing & Notification informationor passwords are changed. Also, they can add/delete employees. These are thedifferences from a standard user.

 

3. Before placing an order, please enter information in the tab “Billing and Notification”. Thesystem requires something on this screen and this information is used forbilling. The person submitting an order will receive emails about the status ofthe order. If you set up one or more emails in “Notification”, these emails will becc’d on emails that are sent.

 

4. Log in. Select and fill in order forms.

    a.  Client Adopters who need key packets sent tothem for factory installation:  The firstorder to place is for an Order Management certificate. (Watch the video in theinvitation email). The person who will receive and decrypt the output fileneeds to order the Order Management certificate. Download Seacert Key Tool (seeinfo below),  create a key pair and submitthe certificate signing request to Seacert. Seacert will return a signedcertificate. This certificate is needed to place IPTV orders. It is used toencrypt the key encryption key that protects private keys in the output file.

    b. After you have an OrderManagement certificate, then select the IPTV Client order form (watch video inthe invitation email . The form will be sent to you in email. Open the email,fill in the form and submit it to Seacert.

 

5. On the email inviting you to register with SOMA are links to twoYouTube videos.

   a. The first video showsthe end-to-end process for a Client Order. The process shown for e-signature isthe same for all order forms.

  b. The other video shows theend-to-end process for an Order Management (OM) certificate. Also, the processfor creating OM keys and order forms it the same as for any Service Order ororder with a CSR to attach.

 

6. On the SOMA screen is a link in the top right corner to SeacertKey Tool. Click on it to download the tool. Both CSR Tool and Unwrap areincluded in the installation.  CSR Toolis used to order the Order Management certificate. Unwrap is needed to decryptthe order output file.

 

 

2、这份证书文件，需要被导进Seacert Tool工具内，然后导出.p12的Key ；其实这里面会报一个错误“Missing 1 Certificates”, 最安全的作法是，在最初创建项目的时候，要把项目名称、CRS名称取好，固定下来；否则会报上错误；

下面是简单的步骤，原邮件摘抄：

To learn more about Seacert Standard Ordering process:

 Watch a video: https://youtu.be/d9AlZnT2nNU

 

 To learn about submittingOrder Management certificate in 4 simple steps.

 1) Download Seacert Key Tool.

 2) Generate CSR (.p10) forOrder management.

 3) Login to SOMA. Request anorder form and attach .p10 file.

 4) Click the hyperlink fromemail, then fill out the order form and submit it.

Watch a video: https://youtu.be/dAoI_WGZfUo

 

3、通过破解版的 Symantec 公司PGP工具，导进.p12, 然后就可以解密pgp加密的文档了；

 

Before you receive the client order output, I would like to send youthis instruction for decrypting using PGP.

 

Your order 160827210623_Order-Sign_xxxxx_P has been completed andis ready in Seacert Order Management system(SOMA). Please login tohttps://soma.seacert.com/ to download theoutput.

 

Please do the following steps:

 

1.      Copy the .zip file toyour Desktop or a convenient folder. Open Seacert Key Tool. In the left panel,select Order-Management-Certs and then double click on the project thatcontains your  Order Management key.Enter your password when prompted. Select the tab in the middle of the page “Manage Keys”. Then select “Import Certificates”. Browse to the .zipfile you received from Seacert and click “Open”. The certificate willbe imported to Seacert Key Tool. You need the certificate (.cer) imported in SeacertKey Tool and associated with the private key (.p8) that is already storedthere.

 

 

2.      Also – very important – please keep a backupcopy of the certificate (xxx.cer), private key (xxx.p8) and project passwordsomewhere secure, but not on the same computer. While in the “Manage Keys” tab, select “Export Keys”. We recommend youexport the keys encrypted. They will be encrypted with the password you usedfor the project. If you do not keep a backup copy of keys and password, neitheryou nor Seacert can recover these keys if you accidently lose or delete themfrom Seacert Key Tool, or if your computer crashes. If you have a backup copy,you can easily download a new version of Seacert Key Tool and import the keysto the tool.  (Note: Keys for Seacert KeyTool are stored on the computer in directory C:\Users\<username>\AppData\Roaming\Seacert\seacertKeyTool\projects. Rather than exportingthe keys to a zip file, an easy alternative is to keep a backup of this entirefolder.)

 

 

 

KEEP THESE INSTRUCTIONS FOR WHEN YOU ORDER CLIENT KEYS AND NEED TODECRYPT THEM:

 

 

3.      Purchase “Symantec Desktop Email Encryption”. This is the only PGP application for which Seacert providesinstructions. There may be a local language version available if you googledthis product name. The US version is available at:http://www.symantec.com/desktop-email-encryption/?fid=encryption ；

这个东西网上有破解版的；可不必购买；土豪除外，多4w人民币可以搞定；

 

 

4.      After we receive yourClient order and run it, you will receive the order output file. The outputfile will be encrypted with PGP. You need to add your Order Management privatekey and certificate to PGP, so you can decrypt the order output. Open SeacertKey Tool and select tab “Manage Keys”. Select “Export Keys to .P12File”. Save the file to your Desktop or folder ofyour choice.

 

 

 

5.      One-time setup for the first use of OrderManagement certificate with PGP:

A. Once the .p12 file is available, open the  Symantec application (there should be an iconthat looks like a lock in the lower right corner of your PC).

 

B. Select File > Import from top menu.

 

C. Select the .p12 file from your Desktop (or folder where you savedit). You may need to change dropdown menu to "All files (*.*) to find it.

 

D. Click "Open".

 

E. Select "As new PGP keys(s)" and "Next".

 

F. Enter Password you selected and click "Next" and"Finish". We recommend you set the same password you used in SeacertKey Tool because this will make it easier to remember.

 

G. Shift-Delete the .P12 file saved on your Desktop. This is animportant key to keep secure and the .p12 file is not password protected. Ifyou need a .p12 again, you can export it from Seacert Key Tool where it is keptpassword protected.

 

 

 

6.    Steps to do for eachorder:

 

A. PGP will decrypt files Seacert output files encrypted using OMcertificate(s).

 

B. Double click on output file from Seacert to open the zip file.Or, if it is a big file, right click and “Extract All” all first. It may bequicker to decrypt if the directories have been unzipped.

 

C. Highlight all the .zip.pgp sub-directories (e.g. 001.zip.pgp,002.zip.pgp, etc.). Double click. Symantec application will open. Enter thepassword for your OM certificate in the box provided. The files will bedecrypted.

 

D. In the left column of the Symantec application, select "PGPZip".

 

E. You will see the decrypted files listed in the middle of thescreen. Highlight all the files. Right click and select "Extract".Select folder to where you want the extracted files to be saved.