Contact and background information on Ezitrust
Explains what Certificates are and how they are used?
Fill out an on-line application
Globally recognsed SSL E-Commerce Certs
Portal for HEAnet members
On-line status check
Announcements and Press Releases
Frequently Asked Questions
Policy Documents, Root Certificates & CRLs
Help using Ezitrust Certificates
Interesting Links for Certificates and Security
The following lists some of the questions that people have been asking about Ezitrust Services.
Q:Who are Ezitrust Limited?
Ezitrust is a company whose mission is to bring public key technology and genuine security to ordinary Internet users. The staff at Ezitrust have been involved in using this technology in a University setting for more than 10 years and have extensive experience in making this technology work.
Q: What exactly is Public Key technology?
This involves the clever use of encryption to allow computer users to digitally sign
documents such as Electronic Mails. The users make use of a special pair of encryption keys (which are really just very large numbers). These keys are designed so that anything encrypted with one key can only be decrypted with the other key. One of these keys is made public (called the Public Key) and the other (the Private Key) is kept a closely guarded secret.
Q: So Is that all I need?
No - a good analogy is a passport. Anyone can take a photograph of themselves and put it into a small notebook with their name on the front, but it would not be acceptable as a means to identify someone. Instead, we must bring the photograph and other proof of identity to the passport issuing office. When they are satisfied that we are who we say, they stick the photograph into a (very hard to forge) passport which we can then use to
gain entry into different countries around the world.
Q: So Ezitrust is like an electronic version of a Passport Authority
Exactly!. Internet users go to our web site where they type in their name, and some
other identity details. Our web site assists them to generate their private and public keys and then to forward the public key to us. We embed this public key into something called a Certificate which the user can use just like a Digital Passport to prove his identity when electronically signing messages.
Q: How does Ezitrust verify my identity
Before your Ezitrust Certificate is issued, we arrange to meet you face-to-face where
our agent will inspect photo-identity documents (such as your real world passport). The exact types of documents that are acceptable will vary a little depending on what kind of certificate you require. Normally, your certificate will also contain your E-mail address, and we verify you have control over this account by asking you to confirm this by E-mail.
Q: How do I install the certificate on my machine?
We will send you E-mail after our face-to-face meeting to tell you that your certificate has
been issued. The E-mail will contain a web link which you click to pick-up your certificate. It is important that you do this on the same PC on which you applied for a certificate in the first place. This machine will already have a copy of the matching private key held in its certificate store. Once, the certificate and the private key are united, you are ready to start using the certificate.
Q: What software works with Ezitrust Certificates?
Many different software packages can already make use of certificates and many more will
appear in the months ahead. In the initial stages, Ezitrust are concentrating on people who want to use their In-Person certificate to sign electronic mail using Microsoft
Outlook or Outlook Express. We will be able to offer you assistance with these packages. Since our certificates are based on all common international standards, we would expect them to work with any software (e.g. Netscape, NetMeeting etc) that claims to
allow certificates to be used. Clearly, we cannot provide user support for all of these
packages, but we would be interested in getting feedback from customers who have succeeded (or failed) with different software packages.
Q: How do I use it with Outlook
A comprehensive guide to using your certificate with
Outlook Express is available in our guides section.
Q: Can I send both signed and encrypted messages straight away?
Once you have a certificate, you can send signed messages straight away. Your E-mail
software will perform the digital signature operation and will include a copy of
your certificate to allow the recipient to verify the signature. Once the recipient has a copy of your certificate, they can reply to you and use your certificate to encrypt the message so only you can read it.
Q: How will it the message appear to the recipient
This depends on the E-mail program they use. If they use Outlook or Outlook Express, a
rosette symbol indicates that the E-mail is signed and they will also be presented with
a dialogue box telling them that the E-mail is encrypted. Try it Now:
Click HERE to have us send you a signed message
and see for your self.
Q: People reading my signed messages with Outlook Express get a "Security Warning", what does this mean?
The E-mail software verifies the signature on the message by looking at the attached certificate. Common E-mail software has a list of certificate Authorities, mostly
American companies, that are trusted. They need to add Ezitrust Limited to this list. They can do this by selecting "Edit Trust" from the Outlook Express security warning, or by selecting the following link:
Q: Can I use the Irish form of my name in a Certificate?
Your certificate will contain both your e-mail adrress (which cannot contain any
accented characters) and also a field referred to as your common name.
Our tests so far indicate that the following characters should not cause
any problems in the common name field:
a acute = alt-160
e acute = alt-130
i acute = alt-161
o acute = alt-162
u acute = alt-163
E acute = alt-144
Please try these out to see if they work for you.