Obtain a new certificate

Before obtaining a new certificate, you need to provide a Certificate Signing Request The way information is returned from an API. In a request, the client provides a resource URL with the proper authorization to an API server. The API returns a response with the information requested. (CSR Certificate Signing Request is a block of encoded text given to a Certificate Authority when applying for an SSL Certificate. It also contains the Public Key to include in the certificate. Usually, a Private Key is created at the same time, making a Key Pair.). See CSR Requirements.

To obtain a new TLS Certificate:

1. In the Markets Portal menu, click System Security > TLS Certificate Management.

2. In the upper-right of the screen, click Create Certificate.

3. On the Create Certificate screen, paste your CSR including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST tag lines.

4. Select either production or non-production environment and click OK. The certificate is listed on the TLS Certificate Management screen.

Once a new certificate is issued, it immediately starts working with AEMO Australian Energy Market Operator systems.

If your new certificate is used for Gas FRC Hub ebXML document signing, you must also submit a request to AEMO to load any new, renewed or reissued X.509 digital certificate into the FRC Hub system before it can be used by the participant for ebXML transactions and document signing. For help, see AEMO Request to Manage TLS Certificates.

A Participant is limited to two valid / issued certificate orders. The Create Certificate button is disabled when there are two issued orders for the Participant. It is recommended to have one production certificate order and one non-production certificate order. If you create two orders for the same environment, contact Support Hub to request more orders for a different environment.