AutoCSR File Unlock Code

When you order an SSL Certificate from Trustico® without supplying your own Certificate Signing Request (CSR), the AutoCSR service creates one for you.

AutoCSR lets you complete an order without technical knowledge, because Trustico® handles the Certificate Signing Request (CSR) for you. Learn About Certificate Signing Requests (CSR) 🔗

For security, your Private Key is delivered in a password-protected archive that cannot be opened without the correct unlock code.

What You Need

To open your Private Key, you need three things : the encrypted ZIP file delivered with your order confirmation, your unlock code from your order details, and compatible ZIP software on your computer.

The archive uses AES-256 encryption, a strong and widely supported standard. The file name inside is visible, but the contents are encrypted and need your unlock code to extract.

Accessing Your Unlock Code

Your unlock code is not included in fulfilment notifications, for security reasons. You will find it in your order details within your customer account.

Log in to the Trustico® ordering system at account.trustico.com, open your order history, and select the relevant order. Your unlock code is shown on the order status page.

Once your SSL Certificate has been validated and issued, the unlock code can also be retrieved from the download page of the Trustico® tracking system, where it remains available for seven days in the same way as within the ordering system.

The sections below explain how to open the encrypted archive on each operating system.

Compatible Software for Windows

Windows File Explorer cannot extract AES-256 encrypted archives. You can browse the contents, but you cannot open or extract the files without 7-Zip or WinZip.

7-Zip is the option we recommend, and it is free from 7-zip.org. After installing it, right-click the ZIP file, choose 7-Zip, then Extract files, and enter your unlock code when prompted. WinZip is a paid alternative from winzip.com, and only its recent versions support AES-256 encryption.

Compatible Software for macOS

The Unarchiver is the option we recommend for macOS, and it is free from theunarchiver.com or the Mac App Store. Install it, double-click the ZIP file, and enter your unlock code when prompted.

Keka is a free alternative from keka.io. Drag the ZIP file onto Keka and enter your unlock code when prompted.

Compatible Software for Linux

The standard Linux unzip command does not support AES-256 encryption, so use 7-Zip (p7zip) or PeaZip instead.

For 7-Zip, install p7zip with the command sudo apt install p7zip-full, then run 7z x filename.zip and enter your unlock code when prompted. PeaZip, from peazip.github.io, is a free alternative with a graphical interface for encrypted archives.

Step-by-Step Instructions

Save the encrypted ZIP file from your order confirmation to your computer, then get your unlock code from your order details at account.trustico.com.

Install one of the tools above if you do not already have it, extract the archive, and enter your unlock code when prompted. Save the Private Key in a secure location and keep a backup.

Security Recommendations

Keep your unlock code private, and do not share it with anyone who does not need it to install your SSL Certificate. Store your Private Key safely and back it up somewhere you control.

Once the Private Key is in its permanent location, delete it from any temporary folders.

Troubleshooting

A "Cannot extract files" or "Wrong password" error usually means the unlock code was not copied exactly, so check it carefully, as it is case-sensitive. Make sure you are using 7-Zip, WinZip, The Unarchiver, or similar, because Windows Explorer cannot extract AES-256 encrypted files.

An "Archive is corrupted" error is worth retrying with a different extraction tool. If the archive still will not open, reissue your SSL Certificate to obtain a new Private Key, as Trustico® does not keep a copy after delivery.

If you cannot find your unlock code, log in at account.trustico.com, locate the order in your order history, and open its details. If you have lost the archive itself, reissue your SSL Certificate, because Trustico® does not store your Private Key and cannot send a replacement.

After Seven Days

The unlock code is displayed for a limited time only. Once that window passes, you will usually need to reissue your SSL Certificate.

Acting promptly when you place an order keeps installation simple, so obtain all installation files and credentials as soon as you are notified that they are ready.

If the seven-day window has passed and you no longer have your credentials, reissue your SSL Certificate with a new Certificate Signing Request (CSR). Your Certificate Authority (CA) Reference number is required to access the tracking system.

For the full process, see our reissue guidance. Learn About Reissuing Your SSL Certificate 🔗

Why This Matters

The Private Key created during the Certificate Signing Request (CSR) process is what secures your SSL Certificate. If the credentials protecting it are exposed, your encrypted traffic is at risk, which is why Trustico® delivers these files so that only you can reach them.

AutoCSR is provided as a courtesy. If you lose access to your protected files, or cannot unlock them, you will need to generate a new Certificate Signing Request (CSR) and reissue. Explore SSL Certificate Installation Instructions 🔗