Date: Thu, 28 Mar 2024 12:43:59 +0100 (CET) Message-ID: <668677928.3679.1711626239607@de.help.internetx.com> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_3678_411250328.1711626239605" ------=_Part_3678_411250328.1711626239605 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
New Baseline Requirements
In order to standardize the issuing a=
nd administration of S/MIME certificates, the CA/B Forum had defined new re=
quirements, taking effect at the beginning of September 2023.
The S/MIME (Secure/Multipurpose Internet Mail Extensions) technology sec=
ures your email correspondence through encryption and signing.
The asymmetrical encryption protects S/MIME e=
mails against unwanted access, i.e. the reading and modification of the ema=
il content by third parties.
The digital signature confirms the authorship of the email and notifies the=
recipient of any unauthorized changes, making it an effective means of det=
ecting phishing emails.
S/MIME certificates are cost-effective because an unlimited number of email=
s and documents can be sent pre-encrypted and signed within an email addres=
s. They are easy to integrate and use.
Digital certificates digitally bind a cryptographic key to a user's iden=
tity, providing proof of the origin and integrity of the transmitted messag=
e.
Once the certificate is installed, the user can easily sign or encrypt sele=
cted emails with one click, or automatically sign and encrypt all emails wi=
th the digital certificate via the corresponding configuration.
S/MIME is supported by most mail clients (e.=
g. Microsoft Outlook, Thunderbird, Apple Mail, Lotus Notes and Mulberry Mai=
l).
The S/MIME certificates are issued via a digital ID for persons and depa= rtments of a company.
No CSR is required when ordering.
Note for PersonalSign Class 2 Pro and PersonalSign=
Class 2 Department:
=E2=86=92 Certificates issued BEFORE August 16, 2023 can no longer be renew=
ed. These must be reordered according to the new requirements (CREATE)
=E2=86=92 A reissue is generally no longer possible
=E2=86=92 An identifier is required when ordering. If this identifier is no=
t available, then the identification as a government (authority)
or international company. The unique identifier can be: Value Added Tax (VA=
T), National Trade Registry (NTR) or Legal Entity Identifier (LEI) number.<=
/p>
Certificate Name | Digital ID for Use | Type | Profile | Digital ID proves Right of Ownership | Verification (Vetting) |
---|---|---|---|---|---|
PersonalSign Class 1 | For general or personal use |
Mailbox-va= lidated | Legacy | Email address | By email |
| E=
OL announced by supplier for August 2023. |
-- | -- | -- | I= n order to continue signing and encrypting emails digitally, other equally = secure S/MIME certificates for your personal use are available in our portf= olio. |
PersonalSign Class 2 |
For a person who represents a company. Th= e company must be located within the EMEA region. If you have = any questions, please contact support. |
Sponsor-validated | Legacy |
Email address |
Execution in two steps (please in this order)= : 1.) Person: video call with GlobalSign Vetting Team =E2=86=92 Via a call to the personnel department with a number from the pho= ne book =E2=86=92 Company Register is checked |
PersonalSign Class 2 Department |
For a department | Organization-validated | Legacy | Email address Assurance of the existence of the organization |
By email Company Register is checked |
CSR is required when ordering.
Certificate Name | Digital ID for Use | Type | Profile | Digital ID proves Right of Ownership | Verification (Vetting) |
---|---|---|---|---|---|
S/MIME Class 1 |
For general or personal use | Mailbox-validated | Legacy | Email address | By email Note that the link in the email = is only valid for a maximum of 24h. To resend the email, please contact you= r support. |
S/MIME Premium (Class 2) | For a person who represents a company | Sponsor-validated | Legacy |
Email address |
By email. Via a call to the personnel department with a number from the phone book Company Register is checked |
Digital Signature Plus | For a person who represents a company | Sponsor-validated | Legacy | Email address Identity assurance of the= person Assurance of the existence of the organization |
By email. Via a call to the personnel department with a number from the phone book Company Register is checked |
With the Digital Signature Plus certificate, it is possible to digitally=
sign documents using e. g. Microsoft Office (without Access), Adobe PDF, O=
penOffice, LibreOffice, etc.
H=
owever, the following applies to Adobe PDF: It is possible to digitally sign documents, but these are no=
t fully trusted, as the Digital Signature Plus is not listed in Adobe's Aut=
horised Trust List (AATL).
=
=E2=86=92 For this use case, we offer the GlobalSign - Document Signing cer=
tificate.
CSR is required when ordering.
Certificate Name | Digital ID for Use | Type | Profile | Digital ID proves Right of Ownership | Verification (Vetting) |
---|---|---|---|---|---|
Sectigo - Personal S/MIME | For general or personal use | Mailbox-validated | Multipurpose | Email address | By email Note that the link in the email = is only valid for a maximum of 24h. |
E= OL announced by supplier for August 2023. | -- | -- |
-- |
I= n order to continue signing and encrypting emails digitally, other equally = secure S/MIME certificates for your personal use are available in our portf= olio. | |
Sectigo - Enterprise S/MIME | For a person who represents an entire company | Organization-validated | Multipurpose | Email address Identity assurance of the person Assurance of the existence of the organization |
By email |
More detailed information on the individual certificates can be found in= our knowledge base<= /a>.