

Initialize the token in FIPS 140-2 mode.Complete a system check to ensure you are able to download the certificates.Contact your token vendor for appropriate information, or your IT Support for organization specific information. Install the token PKI Client middleware on your machine.If you have not received your token, reach out to Customer Support.


Exostar ships your token via FedEx once you schedule your in-person proofing appointment. To download the MLOA hardware certificates, complete the following tasks: NOTE: Refer to the FAQ page for information on any certificate download errors. Once the download is complete, a confirmation message displays. The system prompts you for the password set in step 6, to download the certificates. The system displays the new security level. Please note you need to provide this password each time you use your certificate. By default, the Medium option is already selected. NOTE: Exostar strongly recommends you enable strong protection for your MLOA certificates, unless there are corporate policies against doing so. Click Set Security Level, and then set the security level to High. Refer to the Recover Encryption Key section for more information. NOTE: This activity allows Exostar to archive the encryption key for recovery at a later time.

Click OK to archive your encryption key, and enable key recovery. The system automatically selects all certificates for download. If your passcode is correct, you will see the list of certificates you can download. The passcode is NOT the same as your Managed Access Gateway (MAG) log-in password. You must enter all characters, including hyphens (or leave hyphens out completely). NOTE: The passcode is a 16-digit number separated by hyphens for example: 1234-5678-1234-5678. This passcode is only valid after you receive an FIS approval email from Exostar. Enter the passcode provided to you by your proofing agent during your in-person proofing appointment. Go to the My Account tab, and click the Manage Certificates tab.
