CSOS Certificate Retrieval Instructions
Netscape Version

1. Pair up your activation notices:

For each Certificate issued, you will receive one E-mail and one postal mailed activation notice. These notices contain a matching DEA Registration number or Admin Cert ID Number. If you have received multiple notices, please match each E-mailto its corresponding postal mailed activation notice.

Why have I received multiple activation notices?

2. Access DEA's CSOS Certificate Retrieval Web page:

• http://www.deaecom.gov/retrieve.html

3. Carefully review the policy agreement and click I Accept to continue.

Failure to abide by DEA policy will result in Certificate revocation.

4. Accept all FOUR of DEA's CA Certificates.

All four of DEA's CA Certificates must be accepted once per ordering computer to allow personal CSOS Certificates to be recognized as valid.

Why do I need to accept the CA Certificates?

To accept the E-Commerce Root CA Certificate (step a):

i. Click Accept the DEA E-Commerce Root CA Certificate
ii. At the Downloading Certificate window, put a check in each of the four check boxes and click OK.

To accept the E-Commerce Root CA 2 Certificate (step b):

i. Click Accept the DEA E-Commerce Root CA 2 Certificate
ii. At the Downloading Certificate window, put a check in each of the four check boxes and click OK.

To accept the CSOS Sub CA Certificate (step c):

i. Click Accept the CSOS Sub CA Certificate
. ii. At the Downloading Certificate window, put a check in each of the four check boxes and click OK.

To accept the CSOS Sub CA 2 Certificate (step d):

i. Click Accept the CSOS Sub CA 2 Certificate
. ii. At the Downloading Certificate window, put a check in each of the four check boxes and click OK.

5. Once all four of DEA's Certificates have been accepted, click the Click to continue after installing all DEA CA Certificates button on the bottom of the page.

6. (Step 1) Verify that your Certificate activation notices (postal mail and E-mail) have been paired correctly, and that the postal mailed notice has not expired.

7. (Step 2) Click the Retrieve a CSOS Certificate button.

8. Log in to the secure portion of the CSOS Certificate Retrieval Web site:

You will be prompted for a User Name and Password. Enter the Website Username and Website Password from Step 2 of the postal mailed activation notice. Please note that the Username and Password are case sensitive and should be typed exactly as they appear on the postal mailed activation notice. The Password will contain special characters (i.e. @, $, &, etc.) and capitalization matters.

9. (Step 3a and 3b) Enter the Access Code and Access Code Password for a Certificate.

• The Access Code comes from your E-mail from DEA (regauth@deaecom.gov) and contains only numbers.
• The Access Code Password comes from your postal mailed activation notice from DEA and contains numbers and letters.

10. Click the Submit Request button.

11. Set the Key Length to 1024 (Medium Grade) and click Submit Request.

12. Enter a master password for the Software Security Device and click OK.

• Only the owner of this Certificate may enter this password.
• The password should be at least 8 characters long, should include at least one number, and should be known only by the Certificate owner.
• Do not share the password with anyone, including co-workers, family, and wholesaler partners.
• Please remember this password! If this password is forgotten, lost, or compromised, the Certificate must be revoked and a new one must be issued.

13. If the Certificate was successfully retrieved, you will be brought to a Web page stating Successful CSOS Certificate Creation.

Why did I receive an error?
How do I verify that my Certificate is on my computer?
Do I need to print my Certificate?
What should I do now that I have my Certificate(s)?