Creating Trust Online TM. Extended Validation (EV) High Assurance SSL Certificate Reseller Program

Transcription

1 Creating Trust Online TM Extended Validation (EV) High Assurance SSL Certificate Reseller Program

2 Introduction: Comodo is proud to introduce the EV SSL Reseller Program specifically designed to give you the ability to share the benefits and profit opportunities of EV SSL certificates with your own customers. As the world's second largest Certification Authority, Comodo's partner program offers emerchants access to the latest products and services which enable you to generate more revenue from more of your customers. How? By helping emerchants create trust with their customers. EV SSL certificates are an important tool in creating trust online as vetted merchants whose identity can be verified will receive EV SSL certifciates clearly displaying their credentials in next generation web browsers such as IE 7. Comodo's reseller program is renowned for its patented technologies that deliver authenticated identity SSL solutions making it easier and more profitable for you to provide SSL certificates to your customers. You have two options to sell EV SSL certificates right away - you can integrate an ordering URL into your existing webpage or you ca simply copy a Comodo website template page into your own site. The new template is fully customizable and will allow y you to smoothly integrate your EV SSL certificate offering into the existing look and feel of your website. Comodo delivers SSL Innovation for Creating Trust Online One of the largest portfolio's of PKI-based digitalcertificates including SSL certificates, Content Verification Certificates, Certificates and PC Client Certificates Portfolio of 8 Public root certificates under direct ownership Diverse set of customer management systems aligned to customer requirements and SLA's Fully automated process for certificate issuance with unlimited re-issuance policy Virtually universal browser ubiquity (99+%) with 128/256 bit industry standard encryption Infrastructure to support EV identity validation assurance and other high assurance validation in less than 10 minutes The world's only 2 tier sales infrastructure, enabling resellers to automate their own channel partners Delivering EV SSL certificates with SGC (Server Gated Cryptography) to enable older browsers to achieve 128-bit equivalent encryption The only global CA offering fully integrated private white labeling and branding solution

3 EV Reseller EV SSL Certificate Deployment Overview: The following document is intended to easily enable you to resell the new premium class SSL Certificates Extended Validation the EV SSL Certificates to your customers. A step by step guide will assist you to setup a reseller account for EV SSL certificates as well as introducing you into the Comodo reseller backend infrastructure. You will find answers to the following questions: 1) How can I deploy EV SSL certificates - can I use my existing Comodo systems? 2) Can I validate EV SSL certificates? 3) Do I need to sign a new agreement and where can I get it from? 4) When can I start issuing EV SSL certs? 5) How much do they cost? 6) How does the customized Instant SSL sales system work what do I need to do to sell EV SSL Certificates? ( a step-by-step introduction) 1) How can I deploy EV SSL certificates - can I use my existing Comodo systems? Yes you can. EV SSL Certificates are just another product in your portfolio and deployment is similar to that of any other Comodo SSL Certificate. The key difference is the validation process now requires additional credentials to be submitted before a certificate can be issued. Therefore, both you and your customers need to be aware that issuing an SSL certificate can take time. 2) Can I validate EV SSL certificates? Comodo will do the validation work for you. We will be releasing details of an EV Registration Authority (RA) programe shortly. 3) Do I need to sign a new agreement and where can I get it from? Yes, selling EV SSL Certificates requires additional reporting duties therefore you will have to sign a new reseller agreement with us. Please contact your Comodo sales representative for details. 4) When can I start issuing EV SSL certs? As soon as your new reseller agreement has been signed. 5) How much do they cost? Simply login to your current reseller account to find your EV pricing. New to Comodo? Great. Give us a call on comodo1 or us sales@comodo.com and we'll get you started. 6) How does the customized Instant SSL sales system work - what do I need to do to sell EV SSL certificates? Here's your step-by- step introduction to deploy EV SSL certificates and other Comodo SSL certificates.

4 Logging into your Reseller Account: You can log into your account using the username and password provided during your Reseller signup. Follow the login link displayed throughout If you have forgotten these details please contact immediately. When you have logged into your account click the Reseller Options button. You will be taken to the following page: Account Actions: Your current credit level and Account Actions Details and help on how to get your Reseller Program up and running Click to authorize or reject a pending customer order Run reports on your sales Depositing Additional Funds: Your Reseller Account operates on a prepayment system. You may top up your account at any time with additional funds by selecting Deposit Funds. Unless you have sufficient funds in your Reseller Account you will not be able to Authorise Orders. Our online management system allows you to deposit funds to be used to purchase any SSL Certificates for your customers, whilst the prepayment system ensures you can start purchasing SSL Certificates at great discounts quickly and easily.

5 Your Current Buy Prices: Click the View your Current Buy Prices to display a summary table containing your current buy prices as set by your Account Manager. Setting up your Reseller Facilities: As a Reseller you are provided with a number of Ordering URLs to feed your customers into the InstantSSL & IdAuthority application process. You must use the Ordering URLs in order to pass customers through to your reseller area and to specific products. In you Reseller area you will also find a specify ordering URL for EV SSL Certificates. Customizing an order page for EV SSL Certificates: The order process for EV SSL Certificates will offer you offer you more flexibility then from the one above. At you will find a template generator.the generated HTML code can be directly integrated into your own website. This template is directly connected to the Reseller Management System at Comodo. The only thing you need to do is enter your reseller ID before you generate your template. Step 1: Generate your template Step 2: Integrate the template in your own website (Below you see a sample where the template has been integrated into a Comodo website)

6 Your ordering URLs for all Comodo SSL products inducing EV SSL: Click on the View your Ordering URLs link. As a Reseller you must use the set of Ordering URLs displayed when passing customers through to the Certificate application pages. Your Ordering URLs will contain a reference to: Your Reseller ID The SSL product type Product specific parameters The Reseller program is designed to allow you to develop your own 'product selection page. Simply use your Ordering URLs as your product selection links. Appendix 1 gives a full specification of the Ordering URLs should they be required. Making an actual sale: Customers referred using your Ordering URLs will enter your white-labelled application area. The customer will now be required to enter their Certificate Signing Request and corporate details. Upon completion of the web forms and receipt of the application details by Comodo, the customer will then be prompted to close the Instant SSL browser. Step 1: Customer submits CSR Step 2: Customer complete corporate details Step 3: Details received Notes: InstantSSL will not charge the customer directly for their Certificate. The cost of the Certificate will be debited from your Reseller account.

7 Customer Order Options: Authorize / Reject a sale: An alert will be sent to your administrator contact upon the successful receipt of an application. You will be asked to log into your Reseller Account Manager and to either authorize or reject a sale: Once logged into the InstantSSL system, select the Reseller Options button. Next select the Authorize Your Customers' Orders button for the Authorization pages: Viewing the details provided by the customer during application Click on the Details button to the left of the company name to view the Company details provided by the applicant. Click on the Details button to the left of the Certificate product type to view the Certificate specific details. Authorize a Sale Click the Authorize button to initiate the customer validation process. A confirmation with instructions for validation will be sent to the customer and Comodo will begin validating the application. Upon successful validation of the application the pending Certificate will be issued. Your Reseller Account will be debited with the value of the certificate (as per the banding level you have been awarded). Note: You will only be able to authorize an Order if you have sufficient credit in your account. Should the authorize button be inactive, please deposit additional money into your account. Reject a Sale Click the Reject button to mark the pending application as being rejected. Your account will not be debited for rejected application.

8 Returning Customers: When a customer first purchases an SSL product, an account will be created on the database containing the customer's submitted details. This ensures that returning customers can purchase additional Certificates through their account and do not need to re-enter their corporate details. As a Reseller, we encourage you to retain customers and promote return sales this ensures you continue to make money from your customers. Your return customer must follow the same product links as first time purchase customers. After following one of your Ordering URL, a login box is displayed on the paste CSR page. When a customer logs in at this point, their existing details will be retrieved and they will not be required to complete the corporate details page. All details (Company Name, Address, Admin Address, etc) provided during the application for the first product will be used in the validation and issuance of the additional products. The customer will only be required to complete the first paste CSR page. Your Reseller Brand Name will be used in the login instructions Refunds: Please contact Comodo directly should you face any circumstances that do not fall into the standard Authorize / Reject process. For example, if a customer requires a refund on an issued Certificate we must be informed in order to credit your account and revoke the Certificate. Running Sales Reports using the Report Facilities: Return to the Reseller Options page. Either automatically select your date parameters from the drop down list or enter a From Date and To Date manually. Click the Run Report button to display all customer orders within your selected time period.

9 to your account visit and follow the partners link. Click on the Web Hosts link and then choose to Join the Program. You will then be prompted to either login or choose New login and complete the 1 page form. Your account will then be updated with Web Host abilities. Alternatively, you may follow the below link and sign up directly from here: Promotional material: Please click on the Visit the Reseller Promotional Center link to view the resources available to help you make the most from reselling our SSL Certificates. Getting Help: Should you have any questions regarding your Reseller account please do not hesitate to contact our support department, we will be happy to assist you in any matter. Remember, this is your Reseller Program, so if you have any suggestions for features or would like to see something new that makes your life easier, please contact us.

10 Appendix 1 Reselling Comodo EV SSL certificates If you prefer not to use ordering URLs,you can use the new Comodo Template to set up your own EV SSL sales page. The template can be found at: Reselling Single Products: Your Ordering URLs for reselling single InstantSSL, BudgetSSL and PremiumSSL Certificates: Product Type Ordering URLs InstantSSL 1 year xxx&area=ssl&product=24&years=1&reseller=y InstantSSL 2 year xxx&area=ssl&product=24&years=2&reseller=y InstantSSL 3 year xxx&area=ssl&product=24&years=3&reseller=y InstantSSL Pro 1 year InstantSSL Pro 2 year xxx&area=ssl&product=34&years=1&reseller=y xxx&area=ssl&product=34&years=2&reseller=y InstantSSL Pro 3 year xxx&area=ssl&product=34&years=3&reseller=y PremiumSSL 1 year xxx&area=ssl&product=7&years=1&reseller=y PremiumSSL 2 year xxx&area=ssl&product=7&years=2&reseller=y PremiumSSL 3 year xxx&area=ssl&product=7&years=3&reseller=y Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account. Your Ordering URLs for reselling PremiumSSL Wildcard Certificates: Your Ordering URLs to resell PremiumSSL Wildcard Certificate contain an additional parameter to other Certificates you must also submit the number of servers for which the PremiumSSL Wildcard Certificate is to be used. Please refer to your pricing banding for advice on multi-server pricing. No. of servers 1 year PremiumSSL Wildcard Certificate Ordering URLs 1 xxx&area=ssl&product=35&years=1&reseller=y&servers=1 2 xxx&area=ssl&product=35&years=1&reseller=y&servers=2 3 xxx&area=ssl&product=35&years=1&reseller=y&servers=3 4 xxx&area=ssl&product=35&years=1&reseller=y&servers=4 5 xxx&area=ssl&product=35&years=1&reseller=y&servers=5 6 xxx&area=ssl&product=35&years=1&reseller=y&servers=6 7 xxx&area=ssl&product=35&years=1&reseller=y&servers=7 8 xxx&area=ssl&product=35&years=1&reseller=y&servers=8 9 xxx&area=ssl&product=35&years=1&reseller=y&servers= xxx&area=ssl&product=35&years=1&reseller=y&servers=10

11 No. of servers 2 year PremiumSSL Wildcard Certificate Ordering URLs 1 xxx&area=ssl&product=35&years=2&reseller=y&servers=1 2 xxx&area=ssl&product=35&years=2&reseller=y&servers=2 3 xxx&area=ssl&product=35&years=2&reseller=y&servers=3 4 xxx&area=ssl&product=35&years=2&reseller=y&servers=4 5 xxx&area=ssl&product=35&years=2&reseller=y&servers=5 6 xxx&area=ssl&product=35&years=2&reseller=y&servers=6 7 xxx&area=ssl&product=35&years=2&reseller=y&servers=7 8 xxx&area=ssl&product=35&years=2&reseller=y&servers=8 9 xxx&area=ssl&product=35&years=2&reseller=y&servers= xxx&area=ssl&product=35&years=2&reseller=y&servers=10 No. of servers 3 year PremiumSSL Wildcard Certificate Ordering URLs 1 xxx&area=ssl&product=35&years=3&reseller=y&servers=1 2 xxx&area=ssl&product=35&years=3&reseller=y&servers=2 3 xxx&area=ssl&product=35&years=3&reseller=y&servers=3 4 xxx&area=ssl&product=35&years=3&reseller=y&servers=4 5 xxx&area=ssl&product=35&years=3&reseller=y&servers=5 6 xxx&area=ssl&product=35&years=3&reseller=y&servers=6 7 xxx&area=ssl&product=35&years=3&reseller=y&servers=7 8 xxx&area=ssl&product=35&years=3&reseller=y&servers=8 9 xxx&area=ssl&product=35&years=3&reseller=y&servers= xxx&area=ssl&product=35&years=3&reseller=y&servers=10 Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your ResellerAccount. Your Ordering URLs for reselling IdAuthority Premium Credentials: Product Type Your Ordering URLs Premium Credentials 1 year xxx&area=idauthority&product=36&years=1&reseller=y Premium Credentials 2 year xxx&area=idauthority&product=36&years=2&reseller=y Premium Credentials 3 year xxx&area=idauthority&product=36&years=3&reseller=y Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account.

12 Your Ordering URLs for reselling IdAuthority Card Payment Credentials: Product Type Your Ordering URLs Card Payment 1 year xxx&area=idauthority&product=37&years=1&reseller=y Card Payment 2 year xxx&area=idauthority&product=37&years=2&reseller=y Card Payment 3 year xxx&area=idauthority&product=37&years=3&reseller=y Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your ResellerAccount. Reselling Product Bundles The Reseller system allows you to resell product bundles. Your Ordering URLs for Reselling SSL Certificate plus IdAuthority Premium Credentials SSL Certificate plus IdAuthority Premium Credentials is offered under the product name of SiteID+ on Product Type Your Ordering URLs InstantSSL SiteID+ 1 year xxx&area=ssl&product=24,36&years=1&reseller=y InstantSSL SiteID+ 2 year xxx&area=ssl&product=24,36&years=2&reseller=y InstantSSL SiteID+ 3 year xxx&area=ssl&product=24,36&years=3&reseller=y InstantSSL Pro SiteID+ 1 year xxx&area=ssl&product=34,36&years=1&reseller=y InstantSSL Pro SiteID+ 2 year xxx&area=ssl&product=34,36&years=2&reseller=y InstantSSL Pro SiteID+ 3 year xxx&area=ssl&product=34,36&years=3&reseller=y PremiumSSL SiteID+ 1 year xxx&area=ssl&product=7,36&years=1&reseller=y PremiumSSL SiteID+ 2 year xxx&area=ssl&product=7,36&years=1&reseller=y PremiumSSL SiteID+ 3 year xxx&area=ssl&product=7,36&years=1&reseller=y Your Ordering URLs for reselling PremiumSSL Wildcard SiteID+ Certificates: Your Ordering URLs to resell PremiumSSL Wildcard SiteID+ contain an additional parameter to other SiteID+ products you must also submit the number of servers for which the PremiumSSL Wildcard Certificate is to be used. Please refer to your pricing banding for advice on multi-server pricing.

13 No. of servers 1 year PremiumSSL Wildcard SiteID+ Ordering URLs 1 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=1 2 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=2 3 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=3 4 s/frontpage?ap= xxx&area=ssl&product=35,36&years=1&reseller=y&servers=4 5 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=5 6 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=6 7 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=7 8 xxx&area=ssl&product=35,36&years=1&reseller=y&servers=8 9 cure.comodo.net/products/frontpage?ap= xxx&area=ssl&product=35,36&years=1&reseller=y&servers= xxx&area=ssl&product=35,36&years=1&reseller=y&servers=10 No. of servers 2 year PremiumSSL Wildcard SiteID+ Ordering URLs 1 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=1 2 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=2 3 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=3 4 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=4 5 xxx&area=ssl&product =35,36&years=2&reseller=y&servers=5 6 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=6 7 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=7 8 xxx&area=ssl&product=35,36&years=2&reseller=y&servers=8 9 xxx&area=ssl&product=35,36&years=2&reseller=y&servers= xxx&area=ssl&product=35,36&years=2&reseller=y&servers=10 No. of servers 3 year PremiumSSL Wildcard SiteID+ Ordering URLs 1 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=1 2 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=2 3 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=3 4 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=4 5 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=5 6 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=6 7 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=7 8 xxx&area=ssl&product=35,36&years=3&reseller=y&servers=8 9 xxx&area=ssl&product=35,36&years=3&reseller=y&servers= xxx&area=ssl&product=35,36&years=3&reseller=y&servers=10 Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account.

14 Adding IdAuthority Card Payment Credentials to a Single Certificate / SiteID+ Sale: Details on this product are available at You may also bundle the IdAuthority Card Payment Credentials within a single certificate sale or the sale of an existing SiteID+ bundle. Simply amend the Ordering URL of the product for which the Card Payment Credentials is being added: The product= variable must contain the ID number of the Card Payment Credentials product (37). For example, a 3 year PremiumSSL Wildcard for use on 1 server would be: The above Ordering URL has a,37 inserted into the product variable. Submitting Requests for FREE Trial Certificates (NOTE: This does not apply to EV SSL certificates): Product Type Your Ordering URLs InstantSSL 1 year Note: Replace the xxx from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account Unlike other links please note that reseller=y does NOT need to be present Opening the Ordering URLs in a New Browser Window: It is essential that the Ordering URLs be opened in a new browser window so as not to interfere with your current sales process. You can usually achieve this by inserting a target=_blank into the Anchor tag within you HTML. For example: <a href=" target="_blank"> Upon completion of the InstantSSL application process your customer will be prompted to close the browser white-labelled with your branding.

15 Appendix 2 Extended Validation Overview Overview of the Extended Validation SSL Certificate Vetting Process Extended Validation (EV) SSL Certificates are the next generation of SSL certificates. These certificates are meant to combat emerging online threats that continue to erode trust online. Specifically, these certificates will provide a new way for merchants to prove that their site has been verified as an authenticated business. EV SSLCertificates are designed to provide visitors with the green "good to go" browser indicator when visitors go to a secure page. EV SSL Certificates are designed to provide visitors with the green "good to go" browser indicator when visitors go to a secure page. In Internet Explorer, an EV SSL Certificate will turn the address bar green and display the name of your business next to the webaddress. All major browsers (e.g. Microsoft,Mozilla Opera etc) are integrating new displays in order to provide consumer's with a visual indicator of a website's security. Visitors of an EV SSL Certificate protected website can quickly and easily be assured that the site is a safe place to shop. Overview of the Extended Validation SSL Certificate Vetting Process The Extended Validation (EV) SSL vetting process will validate the requestor's domain control and verify the requesting entity's legal existence and identity. The EVSSL validation process is the most extensive and rigorous in the Industry. This process ensures that the green trust indicator will only be awarded to trustworthy and non-fradulent websites. Unlike other validation processes in the SSL industry, a certification authority issuing EV SSL Certificates cannot rely on any kind of self-reported data (such as address and phone numbers) during the vetting process. This means that all data provided by a company hoping to obtain an EV SSL Certificate will be checked agains relaible third-party sources. Before an EV SSL certificate can be issued, three important steps need to be performed by the EV SSL certificate vendor. The steps are: 1) Confirm the existence of the Company through 3rd party sources 2) Verify that the request has been made on behalf of the company 3) Obtain mutual confirmation of the request between the Certificate Authority and the requesting party Typically this is a contract that will be sent at the end of the validation process to the requesting party. The contract must be signed by an authorized person. For all three steps listed above, special guidelines spell out in detail what background checks should be be performed by any Certificate Authority issuing EV SSL Certificates.

16 Domain name. A customer wishing to obtain an EV SSL Certificate must own and control the domain name that will utilize the EV SSL Certificate. The CA will check website registration records (Whois database) or may ask the customer to make a change to the website under the domain name. Individual's authorization. The Certification Authority must verify that the individual requesting the certificate is acting as a legitimate agent for the requesting company. One way in which a CA may verify this data is by contacting the requesting company's human resource department. The CAwill also verify the identity of the contract signer. ( in most cases this will be a C level management person) Usually this is verified with written documentation. Legal existence and identity. ACAwill check to make sure that the business is legally recognized and that the formal name matches the official Government records. In cases were a trading name is used, the CA must verify any alternative names that differ from the legal name of the customer in qualified databases. Physical existence. The Certification Authority is required to cross-check the address listed in the certificate application against a qualified government database. If the listed address cannot be verified by consulting the government database, an on-site visit may be necessary to investigate the discrepancy. Investigators may need to take photos of business operations or speak with company personal. Telephone number. The CA will confirm that the telephone number listed on the certificate application is the primary telephone number for the requesting organization. This is accomplished by calling the number directly or by checking phone directory listings. Note : If some of the above can not be validated or fully identified, other means of verification are required. The CA will rely on an official letter from a lawyer, notary or accountant. In these cases the authenticity of the documents and the issuing entity will be validated.

17 About Comodo Comodo is a leading global provider of Identity and Trust Assurance services on the Internet, with over 300,000 customers worldwide. Headquartered in Jersey City, NJ with global offices in the US, UK, Ukraine and India, the company offers businesses and consumers the intelligent security, authentication and assurance services necessary to ensure trust in online transactions. As a leading Certification Authority, and in combination with the Digital Trust Lab (DTL), Comodo helps enterprises address digital ecommerce and infrastructure needs with reliable, third generation solutions that improve customer relationships, enhance customer trust and create efficiencies across digital ecommerce operations. Comodo s solutions include SSL certificates, integrated Web hosting management solutions, web content authentication, infrastructure services, digital e- commerce services, digital certification, identity assurance, customer privacy and vulnerability management solutions. For additional information on Comodo Creating Trust Online please visit Comodo US Office, 525 Washington Blvd., Jersey City, NJ Tel : COMODO.1 sales@comodo.com Comodo Group 3rd Floor, Office Village, Exchange Quay, Trafford Road, Salford, Manchester M5 3EQ, United Kingdom. Tel Sales: +44 (0) Fax Sales: +44 (0)