Creating Trust Online TM

Comodo EV AUTO-Enhancer™ Automatic EV Deployment and Maintenance Technology

Creating Trust Online TM

Version 1.1

For use with Comodo Extended Validation SSL Certificates

www.comodo.com

Creating Trust Online

Installing an SSL Certificate is a relatively easy task, performed regularly by Webmasters and System Administrators the world over. Until now, this installation task has been the only step required to successfully enable your website(s) for SSL.

However, with the advent of Extended Validation SSL certifciates in next generation web browsers such as IE7, Microsoft have introduced an added complication. In order to get IE7 on Windows XP to show the EV green bar, each CA (Certification Authority) that sells EV SSL Certificates has had to issue a new Root Certificate. These new Root Certificates will not automatically be installed on end-users' systems, and the EV green bar will NOT be seen until they are somehow installed.Microsoft and our competitors will tell you that it is your responsibility to solve this problem and have recommended 2 solutions:

1. Persuade all of your customers to install an optional “Root Certificate Update” patch from Windows Update.

Problem: Many users don't install Critical patches; even fewer users install Optional patches!

Comodo EV AUTO-Enhancer™

Comodo do not expect our customers to find either of these solutions acceptable. We believe that our customers deserve better. We believe that successfully deploying an EV SSL Certificate should be no more complicated than successfully deploying a non-EV SSL Certificate! For this reason, we allocated significant development resources to find an alternative solution. Comodo is pleased to announce:

2. Add some JavaScript code provided by your CA to every access page of your website(s). This JavaScript code will access an “EV beacon” webiste operated by the CA which will cause IE 7on Windows XP to install the CA’s new Root Certificate. Often CAs will include this JavaScript within a Trust Seal product and will ask you to install this on each of your webpages so as to access the “EV beacon.

Problem: This solution requires considerable installation and ongoing maintenance effort which is both costly and time consuming.

Comodo’s patent-pending EV AUTO-Enhancer™ Automatic EV Deployment and maintenance Technology is able to install Comodo’s EV Root Certifciate automatically on your customer’s computers. They do not need to install a patch from Windows Update and you do not need to modify any of your webpages. In addtion, Comodo’s EV AUTO-Enhancer™ gaurantees to give your customers the EV green bar immediately in IE7 (and next gen-eration EV capabale browsers), even if they have JavaScript disabled in their browser!

Comodo EV AUTO-Enhancer™ Automatic EV Deployment and maintenance Technology

1

Creating Trust Online

EV AUTO-Enhancer™ is a server configuration utility designed to ensure that the correct CA certificates are installed on your webserver and are recognized immediately by your customer's EV web browsers. Installation takes place at the same time as you install your EV SSL certificate. No further action is required by your customers. The installation process should take no longer than installing a standard SSL certificate. EV AUTO-Enhancer will be provided auto-matically with your EV SSL certificate.

How does EV AUTO-Enhancer™ work?

Your EV SSL certificate is presented correctly to your customers with the green bar immediately viewable in IE 7 and next generation EV capable web browsers

No need to manually install Root Certificate update patches from Microsoft

Avoid the hassle and cost of manually installing Java script code or Trust Seals to all of your WebPages

EV AUTO Enhancer can be installed in minutes!

A comparison of EV- enabling technologies. Optional

Microsoft “Root

Certificate Update” patch

“EV beacon” from other CAs

(e .g . V eriS ign E V U pgrader™ )

Comodo EV Enhancer™

(our “E V beacon”)

* R E C O M M E N D E D * Comodo

EV AUTO-Enhancer™

How much is it worth?

Free ~ $300 $300 $1,500

How much does it cost?

Free F ree w ith an E V S S L C ertifica te

from tha t C A

F ree w ith a C om odo E V S S L (or E V S G C

S S L) C ertifica te

F ree w ith a C om odo E V S S L (or E V S G C S S L)

C ertifica te Will your

customers see the EV green bar in IE7

if they have disabled

JavaScript? 1

Y es N o Y es 2 Y es

Will your customers always see the EV green

bar immediately? 3

Y es N o N o Y es

Which of your Staff are required to successfully

deploy an EV SSL Certificate? 4

N one W ebm aster, W ebdes igners

W ebm aster, W ebdes igners

W ebm aster on ly!

Apart from installing your EV SSL Certificate, what additional

deployment steps are required?

E ach o f your cus tom ers m ust m anua lly ins ta ll

the op tiona l pa tch !

Y ou m ust m od ify every w ebpage on

your w ebs ite (s)!

Y ou m ust m od ify every w ebpage on

your w ebs ite (s)!

N o add itiona l s teps are requ ired !! 5

2

Creating Trust Online

1.) In IE7, JavaScript can be disabled simply by changing the “Security level” to “High”. A significant number of users disable Javascript in their browsers – for these users, all “beacon” sites (except Comodo's EV Enhancer™) will always fail to trigger the EV green bar. 2.) Comodo's EV Enhancer™ “EV beacon” site uses our EV AUTO-Enhancer™ technology, even if you are not using EV AUTO-Enhancer™ on your own webserver. This allows us to make EV Enhancer™ work even when Javascript is disabled in the client browser. 3.) If the first webpage your customers visit is downloaded over HTTPS, no “EV beacon” will be able to install the CA's new Root Certificate in time for that webpage to have the EV green bar on that occasion. The EV green bar is only guaranteed to appear the next time the customer views a webpage on that website. This may result in lost sales and lost customer confidence! 4.) Many company websites are not designed by in-house webdesigners. If you intend to use an “EV beacon”, don't forget to allow for the hidden cost of paying external webdesigners to modify your website. 5.) Our cutting-edge EV AUTO-Enhancer™ technology is currently only available to customers that use Apache as their HTTPS webserver – the technology is implemented solely within the “bundle” file referenced by Apache's SSLCertificat-eChainFile configuration directive.

We will shortly be announcing the availability of our EV AUTO-Enhancer™ for the Microsoft IIS webserver. More details to follow...

EV -Enabling Technolgies (Notes)

About ComodoWith over 1,000,000 customers worldwide, Comodo through its family of companies is a leading global provider of Identity and Trust Assurance services on the Internet. Comodo offers businesses and consumers the intelligent security, authentication and assurance services necessary to ensure trust in online transactions.

With global offices in the US, UK, Ukraine and India, Comodo helps enterprises address digital ecommerce and infrastructure needs with reliable, third generation solutions that improve customer relationships, enhance customer trust and create efficiencies across digital ecommerce operations. Comodo's solutions include integrated Web hosting management solutions, infrastructure services, digital e-commerce services, digital certifi-cation, identity assurance, customer privacy and vulnerability management solutions.

For additional information on Comodo - Creating Trust Online™ - please visit: www.comodo.com.