SSL.com

Which Code Signing Certificate do I Need? EV or OV?

You probably already know that a code signing certificate from SSL.com will assure users that your software is from a known and trusted developer, free from unauthorized modifications and malware, and safe to install.

SSL.com offers code signing certificates at both the Organization Validation (OV), and Extended Validation (EV) levels. What’s the difference?

What is Organization Validation (OV)?

Organization Validated (OV) and Individual Validated (IV) certificates require more validation than DV certificates, but provide more trust. For these types, the CA will verify the actual organization or individual person that is attempting to get the certificate. The organization’s or individual’s name is also listed in the certificate, giving additional trust.

An IV code signing certificate is also known as a Personal Identity Certificate and is usually used by independent software developers and individual project contributors who wish to increase confidence and trust from their users.

OV certificates are often used by corporations, governments and other entities that want to provide an extra layer of confidence to their users.

What is Extended Validation (EV)?

Extended validation( EV) certificates, also known as enterprise code signing certificates, provide the maximum amount of trust to visitors, and also require the most effort by the CA to validate. Per guidelines set by the CA/Browser Forum, extra documentation must be provided to issue an EV certificate (as described in SSL.com’s EV requirements). As with OV, EV lists the company name in the certificate itself. EV certificates may only be issued to businesses and other registered organizations, not to individuals.

An EV code signing certificate is required to sign Windows 10 drivers and provides an instant SmartScreen reputation boost. If you’re not sure which code signing certificate you need, please read this FAQ.

SSL.com’s EV Code Signing certificates help protect your code from unauthorized tampering and compromise with the highest level of validation, and are available for as little as $249 per year. You can also use your EV Code Signing certificate at scale in the cloud using eSigner. With its automated option, eSigner is suitable for enterprise code signing.

ORDER NOW

So, which code signing certificate should you buy? The short answer is that EV code signing certificates are more expensive, but offer a higher initial Microsoft SmartScreen reputation level, and are required for signing Windows 10 drivers.

If you’d like to learn more, read on to find out about:

Summary Table
  EV OV
Sign Windows 10 Drivers
Sign pre-Windows-10 Drivers
Instant Microsoft SmartScreen Reputation
Two-factor Authentication with USB Token or Cloud Signing Service
Available to Individuals Without a Registered Business
Trusted on Major Software Platforms

Windows 10 Drivers

An OV certificate may be used to sign drivers for versions of Windows before Windows 10.
Don’t let this happen to your users!
 

Microsoft SmartScreen Reputation

According to Microsoft’s FAQ, its reputation-based SmartScreen filter “checks the files that you download against a list of files that are well known and downloaded by many people who use Internet Explorer. If the file that you’re downloading isn’t on that list, SmartScreen will warn you.”

Signing your code is not required to earn a SmartScreen reputation, but EV-signed code’s extra level of trust lets developers skip this hurdle altogether:

Unfortunately, Microsoft does not publish guidelines on what constitutes enough downloads to eliminate SmartScreen warnings. Microsoft has also indicated in the past that signing code is a “best practice” that you “can follow to help establish and maintain reputation for your applications.”

Authentication and Key Storage

Validation Requirements

Supported Platforms

* Apple Developer ID certificates, issued by Apple, are required to distribute software through the macOS app store and satisfy macOS’s default Gatekeeper settings for software installation (which can be overridden by users if necessary). However, SSL.com code signing certificates may be used to sign files like profiles and policies on macOS. Furthermore, all apps on non-jailbroken iOS devices must be signed by an Apple-issued certificate.

Ordering and Installing Code Signing Certificates

Thank you for choosing SSL.com! If you have any questions, please contact us by email at Support@SSL.com, call 1-877-SSL-SECURE, or just click the chat link at the bottom right of this page.
Exit mobile version