IdenTrust TrustID Digital certificates

2020: Identification of a source of the application using certificates of TrustID EV of CS

On January 22, 2020 HID Global announced expansion of family of digital certificates, offering the certificate with opportunities of expanded check with the code signature (Extended Validation Code Signing, EV CS) protecting the software from counterfeit. Clients who load the software with the digital signature using certificates of IdenTrust TrustID EV of CS can identify a source and start its applications or other code without receiving warning of the unknown publisher (Unknown Publisher) from widely used means of protecting of Microsoft from a phishing and filters of applications for protection against the malware.

Being the center of issue of digital certificates, we introduced all our experience in the solution of a task of protection of a program code in the modern digital world becoming more and more vulnerable. Our certificate for the signature of the IdenTrust code identifies the publisher of the software with the high level of a guarantee and can be used for check that mobile applications and applications for desktop computers, firmwares, drivers or other program code go from an authenticated source and were not changed by the persons which do not have on it powers told Vishvas Patel, the vice president and the chief architect of HID Global in the direction of management of logical access (Identity and Access Management)

Each digital certificate of TrustID EV of CS is issued for smart cards or tokens of HID Crescendo guaranteeing gaining access to it by publishers only through process of two-factor authentication. It also protects private key from export, providing additional confidence in the one who published the code of the software, and eliminates risk of counterfeit or unauthorized updating of the published software. The free service HID Global Timestamp Authority gives the chance of long integrity checking of the digital signature and also prevents cancellation even after expiration or a withdrawal of the certificate of IdenTrust TrustID EV of CS.

Certificates of HID IdenTrust TrustID EV of CS are issued only after strict authentication which instantly defines reputation of the publisher of the software as reliable in filtering system of Microsoft Smartscreen Application Reputation. Process of establishment of reputation can take much more time if the code is not signed with the certificate of EV CS. Until the reputation is set, the filtering system will continue to mark the application as a potential source of infection with the malware at the first start by his clients.