Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

2011 SSL Certificate Research at Casper College


Published on

Published in: Technology, Business
  • Be the first to comment

  • Be the first to like this

2011 SSL Certificate Research at Casper College

  1. 1. Casper College DoIT Certificate of Authority Review
  2. 2. Other CA's .vs. Verisign <ul><ul><li>Bottom Line: The other CA's all seem to offer substantial cost savings over Verisign. Verisign probably commands a higher price because of brand name recognition. Online retailers will pay more because they feel buyers may “trust” Verisign over others. </li></ul></ul><ul><ul><li>ACEDICOM, AffirmTrust, Buypass, Camerfirma, Certicamara S.A., Certigna of Dhimyotis, certSIGN, Certum, Chunghwa Telecom, CNNIC, Comodo, ComSign, DCSSI/ANSSI, DigiCert, DigiNotar (Removed), Disig, E-Guven, Entrust, E-TUGRA, Firmaprofesional, GeoTrust, GlobalSign, Go Daddy, Hongkong Post, IdenTrust, Izenpe, Japanese GPKI, JCSI, Kamu SM, Keynectis/Certplus, Microsec, NetLock, Network Solutions, QuoVadis, SECOM Trust, Sertifitseerimiskeskus AS, Staat der Nederlanden, StartCom, S-TRUST, SwissSign, TC TrustCenter, thawte, Trustwave, T-Systems, TURKTRUST, VeriSign, Verizon / Cybertrust, Wells Fargo, WISeKey </li></ul></ul>
  3. 3. Digicert .vs. Verisign <ul><ul><li>Why Digicert was selected for comparison with Verisign </li></ul></ul><ul><ul><li>The college already has 2 certificates with them </li></ul></ul><ul><ul><li>Our past experience has been positive </li></ul></ul><ul><ul><li>Very good Utah based support </li></ul></ul><ul><ul><li>Certificate issuance is much faster </li></ul></ul><ul><ul><li>Competitive pricing when compared to other CA's </li></ul></ul>
  4. 4. Apples to Apples... <ul><ul><li>Verisign SSL Certificates vs. DigiCert & Thawte Compare Table </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>SSL Certificate Comparison (from digicert) </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>SSL Reviews </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>SSL Certificate List </li></ul></ul><ul><ul><li> </li></ul></ul>
  5. 5. Casper College CA's <ul><ul><li>Verisign - 12 certs $14,652 /year </li></ul></ul><ul><ul><li>Digicert - 12 equivalent certs would be $4,824 /year at retail pricing </li></ul></ul><ul><ul><li>Details... </li></ul></ul>
  6. 6. Digicert Options <ul><ul><li>Purchase certs one at a time </li></ul></ul><ul><ul><li>Contract with Digicert for a package of certs which includes their “ Managed PKI - Enterprise SSL Certificate Management” web service. </li></ul></ul><ul><ul><li>Managed PKI is designed to help organizations take control of certificate management. Account administrators can immediately issue new certificates and reissue, replace, and revoke existing certificates on demand. </li></ul></ul>
  7. 7. The Digicert Deal <ul><ul><li>Digicert's ManagedPKI package deal </li></ul></ul><ul><ul><li>Contract quote... </li></ul></ul><ul><ul><li>71%, $9,828.00 / year at retail pricing </li></ul></ul><ul><ul><li>81%, $11,802.00 / year with contract pricing </li></ul></ul>
  8. 8. Examples... <ul><ul><li>WebAccess (Verisign EV) </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>Data Synchronizer (digicert Standard) </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>Library Remote Database Login </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li>What does digicert EV Look Like? </li></ul></ul><ul><ul><li> </li></ul></ul>
  9. 9. Questions... <ul><ul><li>Is leaving Verisign where we want to cut corners? </li></ul></ul><ul><ul><li>Does CC need the brand name recognition that Verisign has? </li></ul></ul>
  10. 10. Next Step <ul><ul><li>Continue with Verisign if their brand name recognition is valuable for the college </li></ul></ul><ul><ul><li>See if stakeholders are willing to change to Digicert </li></ul></ul><ul><ul><li>Switch to Digicert at retail pricing </li></ul></ul><ul><ul><li>Switch to Digicert inking a one to three year deal with them </li></ul></ul><ul><ul><li>or </li></ul></ul><ul><ul><li>Investigate additional CA issuers </li></ul></ul>