Verisign, Inc. · NASDAQ:VRSN
Verisign — Technical Presentation (May 2010)
24 slides from Verisign's technical presentation, May 5, 2010
Slide 1: 2048-bit root migration
2048-bit root migration WEBINAR Product Management and Marketing May 5, 2010
Slide 2: Agenda
topics AGENDA Why migrate? When? Which products are/n’t affected The details What you can do Q&A 2 2January 2010 VeriSign Confidential and Proprietary
Slide 3: Agenda
topics AGENDA Why migrate? When? Which products are/n’t affected The details What you can do Q&A 3 3January 2010 VeriSign Confidential and Proprietary
Slide 4: Why migrate to 2048-bit roots?
Why migrate to 2048-bit roots? Periodic increases in cryptographic strength are needed from time- to-time and are an industry norm – Allow us to keep ahead of advances in processing power, which may reduce the effectiveness of current cryptographic standards. Requirements of browser vendors – Pe
Slide 5: When will the migration happen?
When will the migration happen? Thawte: June 27, 2010 (during a maintenance window) GeoTrust: July 22, 2010 VeriSign: October, 2010 5 5January 2010 VeriSign Confidential and Proprietary
Slide 6: Which Products will get the 2048 bit roots?
Which Products will get the 2048 bit roots? Thawte – SSL123 Certificates – Thawte Web Server Certificates – Wildcard SSL – Thawte Code Signing Certificates GeoTrust – QuickSSL and QuickSSL Premium – True BusinessID (including multi-domain and wildcard) – GeoTrust Free Trial – ESSL – ESSL Wildcar
Slide 7: What will not be migrating in June/July?
What will not be migrating in June/July? Thawte: – SGC SuperCerts (SuperCerts will be updated in October 2010 to a 2048 bit root) – Web Server Certificates with EV (these are already issued off the Thawte 2048 bit root) GeoTrust: – RapidSSL (will be upgraded in Q4) – True BusinessID with EV (the
Slide 8: Agenda
topics AGENDA Why migrate? When? Which products are/n’t affected The details What you can do Q&A 8 8January 2010 VeriSign Confidential and Proprietary
Slide 9: And the Thawte root is…
And the Thawte root is… Thawte Primary Root CA – The 2048-bit root to be used for all migrating certificates – We’ve issued our EV certificates from this root for the past 4 years For best practices – We’ve created new intermediate CAs for the different certificates issued under the Thawte Prima
Slide 10: Thawte Summary
Thawte Summary Certificate Existing Roots New 2048 Bit Root Intermediate CA Root New Intermediate CA Thawte Webserver Thawte Premium Server N/A Thawte Primary Root CA Thawte SSL CA CA Certificates SSL123 Certificates Thawte Server CA N/A Thawte Primary Root CA Thawte DV SSL CA WildcardSSL Thawte Pre
Slide 11: What will your Thawte customers & users see?
what will your Thawte customers & users see? SAMPLE SITE PROTECTED WITH SSL WEB SERVER CERTIFICATE Before After 11 11 January 2010 VeriSign Confidential and Proprietary
Slide 12: And the GeoTrust Root is…
And the GeoTrust Root is… GeoTrust Global Root CA There will be new intermediate CAs for the different certificates issued under the GeoTrust Global Root: – QuickSSL products – True Business ID and ESSL products 12 12 January 2010 VeriSign Confidential and Proprietary
Slide 13: GeoTrust Summary
GeoTrust Summary Certificate Existing Roots New 2048 Bit Root Intermediate CA Root New Intermediate CA True Busines ID Equifax Secure CA N/A GeoTrust Global CA GeoTrust SSL CA SHA-1 with RSA 1024 SHA-1 with RSA 2048 True Business ID with EV GeoTrust Primary Root GeoTrust EV SSL CA GeoTrust Primary R
Slide 14: What will your GeoTrust customers & users see?
what will your GeoTrust customers & users see? SAMPLE SITE PROTECTED WITH SSL WEB SERVER CERTIFICATE Before After 14 14 January 2010 VeriSign Confidential and Proprietary
Slide 15: Agenda
topics AGENDA Why migrate? When? Which products are/n’t affected The details What you can do Q&A 15 15 January 2010 VeriSign Confidential and Proprietary
Slide 16: Can I get the new CAs now?
Can I get the new CAs now? Thawte – The new CAs are available in our knowledge base under solution SO13881: https://search.thawte.com/support/ssl-digital- certificates/index?page=content&actp=CROSSLINK&id=SO13881 – A link to this solution is also contained in the Thawte 2048 bit Root Migration und
Slide 17: 2048 bit Key size enforcement
2048 bit Key size enforcement To meet the requirements that 1024 bit certificates must expire on or before December 31, 2013 – Hard blocking 4 and 5 year certificates with <2048 bit key sizes will start in July. To meet the requirement that CAs must not issue 1024 bit certificates after December
Slide 18: What can I do right now?
What can I do right now? Stay up to speed! – Visit our support section (Knowledge Center, Advisories) Be ready – Install the appropriate new intermediate CAs and cross-certified roots onto your server(s) – Verify that your legacy / home-grown applications will support 2048-bit certificates and t
Slide 19: Testing
Testing Live test sites are available for testing purposes Thawte Live test sites: – https://ssltest6.bbtest.net (Web Sever); – https://ssltest7.bbtest.net (SSL123) GeoTrust Live Test Sites: – https://ssltest11.bbtest.net (True Business ID) – https://ssltest13.bbtest.net (QuickSSL) 19 19 Janua
Slide 20: Agenda
topics AGENDA Why migrate? When? Which products are/n’t affected The details What you can do Q&A 20 20 January 2010 VeriSign Confidential and Proprietary
Slide 21: Answers to some questions you may already have…
Answers to some questions you may already have… Will this affect existing valid certificates? – No. Only certificates issued after the new roots are live in production. Microsoft will recognize certificates issued off 1024 bit roots until 12/31/2013 Will this affect renewal and replacement/reiss
Slide 22: …Answers to some questions you may have
…Answers to some questions you may have Will the Intermediate CAs be added to Fulfillment e-mails? – Yes Will PKCS#7 format be available for certificates – Ability to download certificate in PKCS#7 format is now available in partner Center for GeoTrust certificates For Thawte certificates, a C
Slide 23: Useful KB Solutions and links
Useful KB Solutions and links Refer to the Messages Center in your partner Center console for links to Thawte, GeoTrust and VeriSign advisories Thawte test sites: – https://ssltest6.bbtest.net (Web Server) – https://ssltest7.bbtets.net (SSL123) GeoTrust Test sites: – https://ssltest11.bbtest.n
Slide 24: Thank you
Thank you 24 24 January 2010 VeriSign Confidential and Proprietary