OV Code Signing Validation
What is Code Signing?
Code Signing certificates allow you to sign a piece of software or code and essentially prove where it came from and that it's trustworthy. This is done with a signature, which tells the browser who made the software and that it hasn't been tampered with by a third party.
When someone attempts to download your software, it allows them to check on who developed it and assures them that it hasn't been tampered with. It gives users confidence that they're downloading what you intended. It also lets them know who you are.
These are both crucial to your success as a software developer. Nobody wants to download something that will affect their computer negatively and Operating Systems are aware of this. That’s why they’ve gone out of their way to generate warning messages anytime someone attempts to download something that may not come from a trustworthy source.
So how do you become a trustworthy source? How do you prevent those messages and alerts from popping up before someone attempts to run YOUR software or code?
A code signing certificate can be issued to an organization or to an individual.
Organization Validation Requirements:
Organization validation verifies the following:
Your organization's legal identity and/or DBA (doing business as) must be verified and the organization is conducting business operations. Validation uses a combination of your legal registration and other third-party reliable sources to verify your organization.
Your business address is verified using a combination of your legal registration and other third-party reliable sources in a similar manner as your operational existence is verified
Phone numbers are verified through reliable third-party databases. The phone number that is verified is typically a main business telephone number
Government-Issued Photo ID:
A copy of a government-issued photo ID is required to verify the requestor (admin contact) on the order.
Authenticity of the Order:
A callback is made by validation to the verified phone number for the organization. A person of authority to request the certificate provides verification that the order was placed for the organization.
If the Validation agent is not able to complete any of these requirements, an email will be sent to you explaining the issue with actions for a resolution
If any documents are requested, please refer to the "How to Submit Documents" section in this document.
Individual Validation Requirements:
Individual Validation is a little different than Organizational Validation because you’re not proving that you’re a company, rather you’re a single developer that must provide evidence of your identity.
There are 2 options you can choose for validation.
Option 1: Two documents you provide for verification:
Option 2: Face to Face document:
This form is used when the photo ID does not match the address on the order or is preferred to use. The Face to Face document explains the specific instructions and requires a notary to attest to and notarized the forms.
The following documents are required:
How to Submit Documents
Documents are submitted using one of these methods:
Upload directly to your order
Create a case and attach the documents