How Business Identity Authentication Works
https://securitycenter.verisign.com/contents_VRSN_US/HTML/howitworks.htm
=========================================================================
How Business Identity Authentication Works
VeriSign's established authentication and verification procedures help merchants grow their online businesses, inspiring trust and confidence in consumers by verifying their identities and reducing the risk of fraud. These procedures are the result of years of operating trusted infrastructure for the Internet and having authenticated over half a million businesses. To appreciate the power and trustworthiness of this process, let's look at the authentication services built into digital certificates.
Individuals and businesses initiate authentication by providing information to VeriSign as part of the fast, convenient online process for purchasing SSL certificates.
VeriSign then verifies that:
The organization and organizational contact personnel are not listed on any of the three U.S. Government denied entity lists: Denied Persons List, Denied Entities List, US Treasury Department List
The organization has government-issued credentials such as articles or incorporation or a business license that allow it to conduct business.
The organization owns the domain name for which the certificate is issued OR has obtained legal right to use that domain name from the owner of the domain.
The organization's corporate contact personnel can be verified via a third-party number as an employee of the organization that is ordering the certificate.
VeriSign then issues the certificate in compliance with VeriSign's Operations Policies, which dictate:
Separation of Duties: two different VeriSign employees must complete authentication of the organization applying for the certificate and verification of the Corporate Contact's employment.
All VeriSign employees that process digital certificates must pass extensive criminal and financial background checks.
Level 3 Security with biometrics are required for all facilities where digital certificates are processed.
All customer data is strictly confidential and data centers containing customer information are housed in highly secured locations with biometrics.
Once the certificate has been issued and the authenticated Web business installs it on its Web server, visitors to the site can instantly access the authentication data by clicking on the VeriSign Secured Seal. This lets them assure themselves that the site is what it appears to be and belongs to a real business. The VeriSign Secured Seal is provided to every Web site equipped with a digital certificate as a symbol of trust.
Authenticode Code Signing Certificate Enrollment Guide
======================================================
Welcome and Overview
This step-by-step guide for VeriSign code signing certificate enrollment describes the contact, certificate, and payment information required to enroll for a VeriSign code signing certificate, how to fill out the enrollment forms, and when to expect your certificate once you have submitted your information.
Code Signing Certificate Enrollment Requirements
To enroll for and receive your code signing certificate, you will need to submit specific and accurate information concerning your organization and the appropriate individuals. Before beginning enrollment, you should be prepared with the following information:
Organizational information for the organization that will be signing code with the certificate
Code signing information (such as your cryptographic service provider, private key security settings, or encryption strength). The information required depends on the the type of code signing certificate you are enrolling for.
Direct contact information for the following individuals:
Technical contact - Responsible for maintaining the certificate
Organizational contact - Responsible for approving the order and verifying your organization
Billing contact - Responsible for settling payment issues
Payment information for one of the following methods:
Credit card - Number, expiration date, and cardholder's name
Purchase order - PO number
Check - Check number
Wire transfer - Bank name
Token - Token number
Enter Technical Contact for this Certificate
Enter the contact information for the person who will use and/or maintain the certificate. The Technical Contact receives the certificate and renewal notifications.
Note the following instructions for Technical Contact information. Unless otherwise noted, all information is required.
First and Last Name
Title - The official title or position held by the Technical Contact.
Company - The organization the Technical Contact works for.
--------------------------------------------------------------------------------
Note: The Company name for the Technical Contact must match the Company name for the certificate you are enrolling for (you will enter this in the next step). If the Company names do not match, the certificate will use the Company name entered for the certificate.
--------------------------------------------------------------------------------
Address, City, State/Province, ZIP/Postal Code, Country - The physical location of the Technical Contact's organization.
Telephone Number - The direct telephone number where the Technical Contact can be reached. Include the area code.
Fax - Optional.
E-mail - The e-mail address where the Technical Contact can be reached.
Note: It is recommended you use an e-mail alias for the Technical Contact e-mail (for example: ssladmin@yourcompany.com). Should the administrative repsonsibilities for this certificate be transferred to another individual, your organization will still receive renewal notifications and other important information regarding your certificate.
Enter Certificate Information
Learn more about:
Entering Authenticode Certificate Information
Selecting Your Cryptographic Service Provider
Backing Up Your Private Key
Entering Authenticode Certificate Information
Enter the organizational information for the organization that will be signing code with the Authenticode certificate.
Company - The legal name of your company or organization. Do not abbreviate.
Division - Department or project name or other identification, if appropriate.
City/Location, State/Province, Country - The physical location where your organization does business. Do not abbreviate.
Selecting Your Cryptographic Service Provider
Select the cryptographic service provider (CSP) you will use with your Authenticode certificate. If you use a specialized device (such as a smart card or other hardware token) to manage your private key, select the appropriate provider from the list. If you are unsure which CSP to choose, select the default.
Backing Up Your Private Key
Enter the path and file name where you want to store your Authenticode certificate's private key. It is strongly recommended that you save the private key to a file that can be stored on a floppy disk, hardware token, or other removable medium.
--------------------------------------------------------------------------------
Note: If you do not specify a file name and you selected the Microsoft Base Cryptographic Provider CSP, the private key will be stored in the system "My" store in the registry. This stored private key is not portable and is always on the computer. Unless the computer is in a very secure location, this practice is not advised.
--------------------------------------------------------------------------------
Verify Certificate Information and Enter a Challenge Phrase
Confirming Your Certificate Information
The information in this section will be contained in your code signing certificate. If this information is incorrect, return to the previous page and re-enter your certificate information.
--------------------------------------------------------------------------------
Important: Check your common name to ensure it is the organization that you want to sign code for. After your code signing certificate has been issued, changing the common name requires re-enrollment at the full price of the certificate.
--------------------------------------------------------------------------------
Entering a Challenge Phrase
Enter a new challenge phrase for this certificate. The challenge phrase allows you to easily retrieve the contact information you enter during enrollment. When you renew your code signing certificate, your contact information is automatically filled in.
Enter Organizational Contact for this Certificate
Entering Organizational Contact Information
Enter the contact information for the person who will approve this order. The Organizational Contact verifies the order and the company and receives renewal notifications.
--------------------------------------------------------------------------------
Important: The Organizational Contact must be a member of the organization identified in your certificate information or CSR.
--------------------------------------------------------------------------------
Note the following instructions for Organizational Contact information. Unless otherwise noted all information is required.
First and Last Name
Title - The official title or position held by the Organizational Contact.
Company - This is extracted from your submitted certificate information or CSR and cannot be edited. If it is incorrect, go back and submit the correct certificate information.
Address, City, State/Province, ZIP/Postal Code, Country - The physical location of the Organizational Contact.
Telephone Number - The direct telephone number where the Organizational Contact can be reached. Include the area code.
Fax - Optional.
E-mail - The e-mail address where the Organizational Contact can be reached.
Enter Payment Information
Learn more about:
Paying by Credit Card
Paying by Purchase Order
Paying by Check
Paying by Wire Transfer
Paying by Token
Entering Billing Contact Information
Payment Type
Select a payment method for this transaction. The page will automatically display options for your selection.
Credit Card
Paying by credit card is the quickest method of payment and ensures delivery of your certificate as soon as VeriSign verifies your organization and domain name. Enter the credit card number, expiration date, and the cardholder's name. Your card will not be charged until your order is approved.
Purchase Order
To pay by purchase order, the purchase order must include:
The exact purchase price in US dollars.
The description "Purchase Order" or "Purchase Commitment." Other descriptions, such as "Purchase Requisition," are not accepted.
Your order number.
Your company name.
Your billing address.
Fax the purchase order to:
650-961-8870
Or mail the purchase order to:
VeriSign, Inc.
Attention: Customer Service
487 East Middlefield Road
Mountain View, California 94043, USA
Check
To pay by check, the check must include:
The exact purchase price drawn on a US bank and in US dollars.
Your order number.
Mail your check to:
VeriSign, Inc.
Attention: Accts Receivable
487 East Middlefield Road
Mountain View, California 94043
Your order will be processed once it is submitted, but the certificate will not be issued until the check is received by VeriSign.
Wire Transfer
Enter the bank name from where the funds will be transferred. To pay by wire transfer, the transfer communication must include:
The exact purchase price.
Your order number.
Provide your bank with the following transfer information:
Beneficiary Customer VeriSign, Inc
Beneficiary Bank Northern Trust Bank
Bank Address 50 South LaSalle Street
Chicago, IL 60675 USA
Telephone Number (312) 630-8100
Beneficiary Bank ABA 071000152
Bank Account Number 98175
SWIFT Code CNORUS44
--------------------------------------------------------------------------------
Note: You are responsible for any transfer charges set by your bank.
--------------------------------------------------------------------------------
Your order will be processed once it is submitted, but the certificate will not be issued until the transfer of funds is complete.
Token
Enter an appropriate token number for the service you are purchasing.
Tokens are available through the VeriSign Secure Site Reseller Program, which allows you to purchase bundles of certificates at discounted prices.
Entering Billing Contact Information
Enter the contact information for the person who is responsible for payment confirmation or questions. The Billing Contact receives all communications regarding payment.
Note the following instructions for contact information. Unless otherwise noted all information is required.
First and Last Name
Title - The official title or position held by the Billing Contact.
Company - The Billing Contact's organization.
Address, City, State/Province, ZIP/Postal Code, Country - The physical location of the Billing Contact's organization.
Telephone Number - The direct telephone number where the Billing Contact can be reached. Include the area code.
Fax - Optional.
E-mail - The e-mail address where the Billing Contact can be reached.
Entering the VAT Number (for European Union organizations only)
If your organization is inside the European Union and you know your organization's VAT number, select your country and enter the VAT number without the country prefix to receive a 0% VAT tax rate.
If your organization is inside the European Union and you do not have a VAT number, skip this section and continue to the next page. You will be charged the VAT rate in effect at the time of purchase in your country.
If your organization is inside the European Union and it is exempt from paying VAT, select your country and leave the VAT Number field blank. Then select the reason it is exempt and read and accept the VAT Exemption Confirmation statement. Reasons for exemption are:
VAT exemption for international organizations - Your organization is or belongs to an international organization not subject to VAT in the country of residence.
VAT exemption for Channel Islands - Your organization resides in the Channel Islands.
VAT exemption for Gibraltar - Your organization resides in Gibraltar.
If you are not inside the European Union, skip this section and continue to the next page. VAT does not apply.
Confirm Your Order
Order Summary
Confirm that the service and certificate type displayed are what you want to purchase.
Final Confirmation of Your Certificate Information
Review your certificate information and common name one more time before submitting your order. If this information is incorrect, go back and enter the correct information.
--------------------------------------------------------------------------------
Important: Check your common name to ensure it is correct. After your certificate has been issued, changing the common name requires re-enrollment at the full price of the certificate.
--------------------------------------------------------------------------------
Technical and Organizational Contact Information
Review the contact information. If this information is incorrect, click Edit to return to the Enter Contact Information page.
Payment and Billing Contact Information
Review the payment method and contact information. If this information is incorrect, click Edit to return to the Enter Payment Information page.
Subscriber Agreement
Review the Subscriber Agreement. Submitting your order indicates that you agree to the terms of the Subscriber Agreement.
Accept & Purchase
If you are confident all information is correct, click the Accept & Purchase button to submit your order.
Your Order Has Been Submitted
The Technical and Organizational Contacts will shortly receive an e-mail message confirming this purchase. The e-mail includes your order number and a link to the Order Status page so you can track the progress of your order.
Your Order Number
Print this page or otherwise make a note of your order number. You will need your order number to check the status of your order online, contact VeriSign Customer Support for information on your order, and to submit payment on this order.
Authentication and Verification
VeriSign will now examine the information that you have submitted. If all the information is accurate and valid, VeriSign can verify your organizational and certificate information and approve your order in 3-5 business days.
Payment Instructions
If you chose a method other than credit card, follow the instructions to ensure prompt delivery of your certificate. After VeriSign has verified your organization and certificate information and has confirmed receipt of payment, you will receive your certificate.
Copyright © VeriSign, Inc.