Detailed DESC process description
Customer approaches DESC Team/UAE PASS Team for eSeal certificate.
The customer approaches the designated contacts from UAE PASS team/DESC team to initiate the eSeal issuance process.
The customer should elaborate at least at a high level on the business use case(s) where the eSeal signing is needed.
The customer should specify the number of eSeal certificates required. E.g., there could be multiple departments within the same entity where each department needs a dedicated eSeal that displays the Department name being the document issuer.
Forward the request to UAE PASS team.
If the customer approached DESC team first, then the request is going to be forwarded to UAE PASS team for evaluation of the business case and applicability of eSeal use. The customer can skip this step by approaching UAE PASS team directly.
Share the eSeal Questionnaire.
Once a request is received from the customer directly or through DESC team, UAE PASS team prepare a consolidated email covering the eSeal questionnaire, Seal implementation assessment and send it to the customer while keeping DESC team in the loop:
In that email to customer, UAE PASS team will ask the Customer to fill-in the questionnaire in order to evaluate the business case(s) and ensure that eSeal is applicable for such business case(s).
Fill-in the eSeal Questionnaire form.
The customer studies the guiding information provided by UAE PASS team and go through the list of shared documents,
The customer fills the eSeal questionnaire and shares it back with UAE PASS team.
Verify the eSeal Use case.
UAE PASS team analyze the questionnaire answers and conclude whether eSeal is applicable or not,
UAE PASS team share the analysis results with the customer and DESC team (if the request came through DESC).
Conduct a kick-off and planning call.
Of the eSeal is applicable to the use case(s) demonstrated by the customer, UAE PASS team interacts with the customer to arrange a kickoff and planning call. During the call, the customer will be introduced to the overall process and high-level timeline will be agreed. UAE PASS team and the customer will also initiate discussion about a detailed implementation plan to be mutually agreed.
UAE PASS team instructs the customer to approach DESC RA team for initiating the eSeal certificate issuance process. This shall result in an email sent from UAE PASS team to DESC RA while keeping the Customer in the loop.
Share requirements and relevant documentation.
Once the initiation email is received from UAE PASS team, DESC RA team prepare a consolidate email covering the following and send it to the customer while keeping UAE PASS team in the loop:
1. Subscriber agreement 2. Certificate request form 3. List of required documents from the customer, which are: o Proof of Entity’s existence: ▪ Government entities: Establishment Degree/Resolution ▪ Non-Government entities: Trade license
o Proof of association between the authorizer and the organization: ▪ A reference to a trusted public authoritative source ▪ Formal document o Proof of association between the certificate Common Name and the organization o ID copy of the authorizer o ID copy of the certificate requester
In that email to customer, DESC team will ask the customer to study the provided information and go through the shared documents. DESC team will also suggest a time slot for a meeting to discuss eSeal certificate requirements and timeline.
Review eSeal certificate requirements
The customer goes through the list of requirements and the guiding information shared by DESC team then prepare clarifications required from UAE PASS team/DESC team.
Customer responds to DESC team’s email with confirmation on their availability for the meeting to discuss eSeal certificate requirements and timeline.
Conduct a call to discuss eSeal certificate requirements and timeline
Answer clarifications raised by the Customer
Agree on the overall timeline with key milestones for the certificate issuance process
UAE PASS team to update the overall eSeal implementation plan to accommodate the agreed certificate issuance timeline
Decide on TEST certificate information
The customer decides on the name (Subject DN) to be reflected on the test certificate, that should exactly match the production certificate. However as mandated by DESC practices, the word “TEST” needs to be added as a prefix to the Common Name of TEST certificates.
The customer shares the decided Subject DN with DESC team through email with copying UAE PASS team.
Issue auth code for TEST certificate.
Once the TEST certificate Subject DN is received, DESC team initiate the certificate initiation on staging which will result in generation of authorization code.
DESC team share the authorization code with UAE PASS team for them to generate the CSR accordingly, the code will be shared through an email with copying the customer.
Generate certificate request (CSR) for TEST
Once the authorization codes is received, UAE PASS team generate the key and CSR.
UAE PASS team share the CSR with DESC team through an email with copying the customer.
Issue TEST certificate
Once the CSR is received, DESC team complete the certificate generation on staging.
DESC team share the generated TEST certificate with UAE PASS team through an email with copying the customer.
Configure TEST certificate on staging
Once the TEST certificate is received, UAE PASS team complete the eSeal service configuration on staging.
UAE PASS team establishes readiness of the service on the test environment and communicate as required with the customer to start testing.
Test with TEST certificate
Once the eSeal service is ready on the test environment, UAE PASS team coordinate as required with the customer to conduct the test as agreed between both of them.
Staging Assessment
UAE PASS team to evaluate the testing done on staging using their own checklist. If the assessment is passed, the assessment results is going to be signed off which will be considered as an authorization for executing the step 9.B.5 “Issue auth code for PROD certificate”.
If the assessment was not passed, UAE PASS team will coordinate the Customer to do required updates on configurations (if required) and repeat the test again.
Prepare required documentation & submit it to DESC team
Following the clarification call, the customer should be able to prepare all required documentation and as instructed by DESC team.
The certificate form and subscriber agreement shall be signed by a legal representative of the organization.
The customer shares the prepared documentation with DESC team through email.
Validate documentation
Once the documentation is received by DESC team, the RA team will conduct a detailed review and an initial identity verification of identities.
The RA team will communicate with Customer’s HR to verify the association between the certificate requester and the organization. The RA team may also raise any clarification related to the authorizer’s association if the provided references are not sufficient.
In case of missing information, DESC team will communicate with the customer to complete such gaps or clarify ambiguities.
Complete identity vetting.
Once the information is initially reviewed and all gaps are covered by the customer, DESC RA team will conduct a detailed vetting of the organization’s identity, Authorizer identity and certificate requester identity.
The RA team will also verify the certificate information and the association with the organization.
DESC team may communicate with the customer to clarify last minute ambiguities.
Once the vetting is completed, DESC team will communicate the final results to the client via email with copying UAE PASS team.
Reject Request & Revoke TEST certificate
In case if the vetting results was negative, the certificate request will be rejected by DESC team.
DESC team will revoke the TEST certificate issued.
DESC team will send an email to the Customer and UAE PASS team to notify them on certificate revocation.
Issue auth code for PROD certificate
Once the certificate request is finally approved by DESC, DESC RA team initiate the certificate initiation on production which will result in generation of authorization code.
DESC team share the authorization code with UAE PASS team for them to generate the CSR accordingly, the code will be shared through an email with copying the customer.
Generate certificate request (CSR) for PROD.
Once the authorization code is received, UAE PASS team generate the key and CSR.
UAE PASS team share the CSR with DESC RA team through an email with copying the customer
Issue PROD certificate.
Once the CSR is received, DESC team complete the certificate generation on production.
DESC team RA team share the generated PROD certificate with UAE PASS team through an email with copying the customer.
Configure PROD certificate
Once the PROD certificate is received, UAE PASS team complete the eSeal service configuration on production.
UAE PASS team establishe readiness of the service on the production environment and communicate as required with the customer for switching to production.
Pilot test on PROD
Once the eSeal service is ready on the production environment, UAE PASS team coordinate as required with the customer to switch to production and conduct a limited pilot test.
Post PROD assessment
UAE PASS team coordinate as required with the customer to evaluate the results of the pilot test and conclude the overall process.
Last updated
Was this helpful?