The x509 [SSL] Certificate Service provides access to no-cost SSL/TLS certificates for UBC services, including wildcard, multi-domain, and single domain options. This service supports compliance with UBC Information Security Standards by ensuring encrypted communication and integrity across web-based systems. It also promotes the secure operation of UBC’s digital infrastructure in line with CA/Browser Forum best practices.
Certificates issued through this service have a maximum validity of one year. Renewal reminders, certificate signing request (CSR) assistance, and installation support are included in this service.
Features and Benefits
| Feature | Benefits |
|---|---|
| Multiple Certificate Types | Offers flexibility for different architectures.
|
| Multiple Signature Algorithms | Provides better security and less processing overhead through the use of ECDSA certificates. RSA certificates are also offered where required for compatibility. |
| Installation Support | Facilitates easier installation of certificates with guidance and instruction from knowledgeable staff on proper certificate deployment on web servers, load balancers, and other services. |
| ISS Compliant UBC ISS M7 § 2.6 | Certificates obtained through this service meet all requirements as outlined in section 2.6 of UBC Information Security Standard M7 – Cryptographic Controls. They can be used to secure internal or external services. |
| CSR Generation Assistance | Reduces friction by offering guidance and hands-on support in generating certificate signing requests tailored to your environment. |
| One-Year Validity | Certificates are issued with a one-year expiration period, adhering to § 6.3.2 of the CA/Browser Forum Baseline Requirements |
| Automated Renewal Reminders | Significantly reduces the risk of expired certificates remaining in production. Multiple system-generated reminders are sent well in advance of expiration to facilitate timely renewal. |
| Service Availability | Certificate requests are reviewed and certificates are issued during regular business hours. Certificate renewal notifications are automated and issued 24/7. |
| Support Availability | Regular business hours |
Requirements and Eligibility
Audience
UBC system administrators, developers, application administrators, or Technical Owners may request this service.
Price
No cost
Learn More
Getting Started
Requests for SSL certificates can be submitted through the Cybersecurity Services section of the UBC Self Service Portal. Once your request is submitted, a Cybersecurity Analyst will review it within one business day. Certificates within the ubc.ca domain space are generally issued within one business day. Certificates for non ubc.ca domains may take longer to issue as all public certificate authorities require that their domain validation processes are followed.
Further Information
| Resource | Login Required | Accessible From | Notes |
|---|---|---|---|
| Client Documentation | CWL | Anywhere |
Get Help
For support or more information about this service, please submit a ticket under Submit a Support Request in the Cybersecurity Services section of the UBC Self Service Portal. Support is provided during regular business hours.