Symantec Code Signing EV certificate

The Principle of EV Signature

The Benefits of EV Signature for Applications

EV Code signing is a breakthrough for all application creators. It helps your application to attain higher credibility and it prevents blocking the program in Windows Smartscreen Filter. An application signed by an EV Code Signing certificate can never be blocked by SmartScreen.

The application will not be blocked even if SmartScreen does not “know” it. SmartScreen can block even applications signed by an average Code Signing certificate if it does not have sufficient reputation and does not “know” it.

Another big advantage is a higher safety of use. The certificate and its private key are saved on a HW token, which you get from the certification authority.

Saving keys on a HW token protects a certificate against abuse. You do not need to save it on the computer and risk its theft. Both the certificate and the private key are saved on a token and to use them you need a password. A possible thief would have to not only physically steal the HW token but they would have to know your password for its use.

You need a HW token to sign the application. While signing it, a servicing application for the HW token appears, in which you insert the password to your private key and the application will be signed. You do not have to save the certificate on your computer and if the token is stolen, the private key is protected by a password. If the password is inserted incorrectly several times, the token is blocked. This way, password breach is eliminated (e.g. by a dictionary attack).

A Code Signing EV certificate and its signature brings higher security of use, a more trustworthy signature and it protects the certificate owner against theft and certificate abuse.

Displaying Certificate

After starting an application signed by a Symantec Code Signing EV certificate, introductory information about a started file comes up. More importantly, information about the company’s credibility which digitally signed the application is displayed. The detail then contains information about the date that the application was signed, details about the certification authority and other information about the issuer.

Supported platforms

Depending on the platform used, you can choose the Symantec Code Signing EV certificate completely right for your purposes.

Certificate validation method

The process of issuing an SSL certificate is fully manual and comprises applicant data validation. The organization´s data is checked in the Commercial Register and the organization´s contact data is checked in public phone books. Finally, a phone call with the authorization person stated on the order is made.
If the certificate authority can't find any information publicly, it requires additional validation using forms. The time to issue the certificate increases by the time needed to make additional verifications.

Certificate issuance time

If you enter a correct CSR file to your order and make the payment online (credit card), your SSL certificate will be issued automatically in a few business days.