1. SSL URL SETUP FOR PREFERENCE MANAGER
1.1. Information for Clients
1.1.1. Hosting URL
The URL on which Preference Manager will reside must be selected and registered.
For a Test installation, a URL will be supplied (e.g.
http://staging.CLIENTNAME.pm.cmaplive.com). For Live installations, an appropriate
URL must be selected and purchased, and the SSL certificate arranged.
The hosting URL must be of the form:
- https://clientsubdomain.domain.com or,
It cannot be of the form:
Examples of hosting URLs chosen by clients are:
1.1.2. SSL certificates
The SSL certificate will be purchased by the client, and installed on Concep’s server
against your chosen domain. By issuing the SSL certificate, you are certifying Concep
servers as the entity that is authorized to allow your recipients to manage their details
through Preference Manager.
The alternative option is for Preference Manager to be hosted under a Concep domain
(e.g. https://CLIENTNAME.pm.cmaplive.com), however the majority of clients opt for a
1.1.3. Type of SSL certificate
Any standard SSL certificate for a single domain will be fine, an Extended Validation
certificates or similar can be purchased if you wish.
The SSL certificate should be supplied to Concep in one of the following formats:
- .pfx (preferable)
If you have any specific questions please contact the Implementation Manager.
1.1.4. Concep’s web server
The certificate will be installed on Concep’s webserver, which runs Microsoft IIS v7.
Concep highly recommends that all traffic to Preference Manager is only transmitted
over SSL. This applies to both traffic between a recipient’s browser and Concep’s Web
application, as well as a client’s integration servers and Concep’s APIs. The SSL
certificate that is purchased will be installed on a dedicated Amazon EC2 load
balancer which points to our web server within our DMZ. Amazon AWS has gone
through SAS 70 Type II audits and has our security approval as a service provider.
ISO27001:2005 Certification has also been granted to Concep Group Ltd.
1.2. Setup Process
The process for correctly setting up an SSL certificate and the URL for Preference
Manager is as follows – each step is marked as to whose responsibility it is.
Selection of URL
|The URL must be a domain or
subdomain of the client’s main
is not permitted
Purchase / Register Domain
Client to advise Concep once this has been completed
Send details to Concep
| Client to send Concep the following
CSR File Generation
|Concep will generate the CSR per the client’s details and send through to the client. This will have a key length of 2048 bits.||Concep|
Provision of CNAME Record
|Concep will provide the CNAME to which the client must point the DNS record of the chosen URL||Concep|
Configure DNS to point to CNAME record
|As per Concep's Instructions||Client|
Purchase of SSL
|Client will purchase the SSL certificate using the CSR provided by Concep. This should be in .pfx format||Client|
|Provide Concep with SSL||Client will provide Concep with the SSL certificate||Client|
Installation of SSL
|Concep will install the SSL certificate in our environment against the chosen domain||Concep|
NOTE: This may take around a week to be processed correctly, so please allow
enough time for everything to be processed.