Digicert Code Signing Certificates for Java

Digital Shrink Wrap to Protect Your Brand

Digicert Code Signing Certificates provide a virtual "shrink wrap" for secure delivery of content over the Internet. When customers download software signed with Authenticode Technology and verified by Digicert, they can be assured of the content source and the content integrity. Code Signing adds a level of trust to your applications and makes them harder to falsify or damage, protecting your brand and your intellectual property.

Increase Customer Confidence with Fewer Security Warnings

When Internet Explorer, Exchange, Outlook, or other Microsoft programs encounter unsigned executables, a security warning disrupts the user or content simply fails to load. To prevent disruption, publishers who use ActiveX controls, plug-ins and other executables should sign their code using Authenticode Technology and a Digicert Code Signing Certificate for Microsoft Authenticode.

Make the Most of Your Digicert Code Signing Investment

With Digicert Code Signing Certificates, developers select a platform, a validity period and install the certificate on their desktop or a portable device such as a USB drive. A timestamp option shows when code was signed, allowing customers to verify that the Code Signing Certificate was valid at the time of the digital signature. Digicert is a trusted provider of digital certificates for Microsoft Windows Logo programs.

Digicert Is The Leader in Online Trust and Security

Digicert supports more platforms than any other code signing provider with the most reliable infrastructure and the most trusted security brand on the Internet (Tec-Ed Whitepaper, PDF, Oct. 2007). Because Digicert Root Certificates come pre-installed on most end users' devices and embedded in most applications, the digital signature authentication and verification process is seamless and transparent to most end users.

A Digicert Code Signing Certificate generates a digital signature that provides authentication of the code source and assurance of code integrity. Increasingly, operating systems, software applications, devices, and mobile networks require a digital signature to ensure that the code will not harm or interrupt services.

How Digicert Code Signing Certificates Work

With a Digicert Code Signing Certificate, the developer signs all code with the same digital signature using public key cryptography.

1. A developer or software publisher uses a Code Signing Certificate to add a digital signature to code or content using a unique private key.
2. The content is uploaded to a website or mobile network or otherwise made available for download.
3. When a user downloads or encounters the code, the user's system software or application uses a public key to decrypt the signature.
4. By comparing the hash used to sign the application against the hash on the downloaded application, the system determines whether to warn the end user, not allow the download, or allow the download without interruption (depending on the platform, application, and client security settings).

Different software platforms have different requirements and different tools for signing code.

Digicert offers Code Signing Certificates for:

• Microsoft Authenticode
• Java
• Microsoft Office and Microsoft VBA
• Adobe AIR

Root Certificates: Why Your CA Matters

When software decrypts the digital signature, it looks for a "root" certificate, the source of the identity information. A self-signed digital certificate means that you own your own Root Certificate and are vouching for your own identity, kind of like using a homemade photo ID. In most cases, your Root Certificate will not be available to third party software and devices, and a warning message will appear.

When you enroll for a digital certificate from a Certificate Authority (CA), the CA authenticates your identity and provides a certificate that is chained to its Root Certificate. If the software or device trusts the provider of your Root Certificate (CA), it trusts you.

Digicert is the most trusted security brand on the Internet (Tec-Ed Whitepaper, PDF, Oct. 2007) and we support more development platforms than any other code signing provider. Digicert uses a robust and time-tested authentication and validation process, recognized worldwide. Before issuing a digital certificate with your full organizational name and your public key, Digicert validates the existence of the organization with third party sources and your authority to request a certificate on the organization's behalf.

Digicert Certificate Center allows you to buy, renew, and manage all your certificates with a single sign-in:

• Select certificate options and a validity period.
• Enter required contact information.
• Enter certificate information (choose the default if you are not sure), create a backup and follow instructions.
• Enter organization and billing information.
• Create a Digicert Certificate Center account or sign in to an existing account.
• Pick up your certificate in Digicert Certificate Center after Digicert completes authentication.

NOTE: You must buy and retrieve your Digicert Code Signing Certificate from the same computer. Problems? Confirm that you are using the same computer, browser, and log-in profile used to enroll.

Your Digicert Code Signing Certificate contains your full organizational name and your public key. It can be used to digitally sign code and content during the certificate validity period.