Seminar Topics & Project Ideas On Computer Science Electronics Electrical Mechanical Engineering Civil MBA Medicine Nursing Science Physics Mathematics Chemistry ppt pdf doc presentation downloads and Abstract

Full Version: Digital Certificate
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Digital Certificate
[attachment=28847]
Digital Certificate Agenda
What is a Digital Certificate?
Why Digital Certificate needed for e-Tendering?
Who Issues Digital Certificates?
Types of Digital Certificates
Validity of a Digital Certificate
How to Apply for a Digital Certificate?
Do’s & Dont’s of Digital Certificate
Installation of digital certificate
What is a Digital Certificate?
Digital Certificates serve as an identity of an individual for a
certain purpose, e.g. a driving license identifies someone
who can legally drive in a particular country.
Digital Certificate can be presented electronically to prove
your identity or your right to access information or services
on the Internet.
Use of Legally Valid Class III Digital Signature and USB
Token to store the Signature is compulsory as per Indian IT
Why Digital Certificate needed for e-Tendering?
To enable Trust & Security
Authentication : How do you verify whether the vendors are really sending the information or some others?
Confidentiality : How do you make sure that the information sent is read only by intended users and nobody else?
Integrity : How do you make sure that the information sent is not
altered dishonestly or falsely?
Who Issues Digital Certificates?
Certifying Authority (CA) issues the digital certificates
There are 7 CA’s in India who in turn report to the Controller of Certifying Authorities (CCA)
The licensed CA’s in India are:
• Safescrypt
• NIC
• IDRBT
• TCS
• MTNL
• (n)Code Solution CA (GNFC)
• e-Mudhra
Validity of a Digital Certificate
Digital certificate can be issued by CA’s
for a period of minimum of one year
to two years.
IE -> Tools -> Internet Options ->
-> Content -> Certificate -> View
Types of Digital Certificates
There are 3 different classes of certificates for different applications
Class 1 is for email.
Class 2 is for IT filing, etc.,
Class 3 are high assurance certificates, primarily intended for e-commerce applications and are issued to individuals only on their personal (physical) appearance before the Certifying Authorities.
* Only Class III 2048 Bit Signing & Encryption (Company / Enterprise User) Digital Certificate is valid for BHEL e-Tendering
How to Apply for a Digital Certificate?
A digital certificate can be bought from any of the CAs or from any of the Local Registration Authority (LRA) as approved by any of the CAs.
1. Application –
Access the CA website to select customer type and class of certificate needed and to accept Subscriber Agreement.
b. Fill the online registration form and choose a password for later authentication.
c. After due verification of mandatory fields, confirm the given details again and print the displayed form to hand sign and send it across to the CA.
2. Authentication
The CA verifies and validates the information provided in the online application and identification form.
b. Upon approval, the CA sends an email on the email address provided in the application form with a link for email id verification.
c. Generally it takes around 3 weeks for an Indian national & 5 weeks for an foreign national to get an digital certificate from the date of his/her application for the same.
Do’s of Digital Certificates
The token containing certificate should be preserved in the safe custody of the owner of the certificate.
If the token is lost, inform the concerned CA and request for revocation of the certificate.
Protect your computer from unauthorized access by keeping it physically secure.
Use access control products or operating system protection features (such as a system password).
Take measures to protect your computer from viruses.
Always choose to protect your private key with a good password
Dont’s of Digital Certificates
Don’t share your DSC.
Your DSC should be protected by a password and should never be sent across any network.