FAQ By Certificate Lifecycle (Apply)

In order to handle this task you need to install the latest Microsoft® SignTool.

Please refer to this Microsoft® website for details:
https://docs.microsoft.com/en-us/windows/win32/seccrypto/signtool?redirectedfrom=MSDN

Use this URL as the IdenTrust Timestamping Server Authority: 
http://timestamp.identrust.com

Part 1:

Forms sent to IdenTrust are sometimes missing required information such as the organization officer’s signature, title, email and/or phone number, as well as the date it was signed. It’s also possible the form does not show the organization name and/or address that was listed on the online application.

If information is missing, you will receive an email outlining what was missing on the form, as well as a copy of a blank Part 1 form.

Part 2:

Forms require a number of fields to be filled out, some of which sometimes get missed. Most common fields are the signatures of the applicant and/or notary, specific details about the IDs presented for verification, and the email address either missing or not matching that listed on the application. There can be other errors with the form as well.

If information is missing, you will receive an email outlining what was missing on the form, as well as a copy of a blank Part 2 form.

Please send the complete, original form(s) to: 

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116

You may also email the completed form to [email protected], from the email address provided during your online application. 

Your new or renewal application for the IdenTrust TrustID digital certificate will remain open for 45 days which will give you time to complete the application, any forms required, and email verification. After 45 days has elapsed without usable paperwork or email verification being submitted, the application will close and you will need to complete a new application.

Once you have electronically verified the email address provided on your application, and regardless of when any paperwork is provided or application is approved, a 30-day countdown begins. This means that you have 30 days from that date to complete registration, approval and retrieval the certificate. This is a requirement of the certificate policy and the CA/B Forum S/MIME Baseline Requirements and as such, once the 30 day window has passed a new application.

When an application has closed, it cannot be reopened.

Note: The 30-day countdown does not apply to IdenTrust TrustID EV SSL, EV Code Signing, and OV certificates.

Your initial application will remain open for 45 days which will give you time to complete your forms packet and send the original, valid forms to IdenTrust for processing. After 45 days has elapsed without usable paperwork being submitted, the application will close and you will need to complete a new application.

 

Once the notary / Trusted Agent / ADE (depending on the certificate you apply for) signs the Part 2 form verifying your ID documents, a 30-day countdown begins. This means that you have 30 days from that date to send in your forms, be approved for the certificate and to retrieve the certificate. This is a requirement of the certificate policy and as such, once the 30 day window has passed a new application and forms packet will need to be completed.

 

Once an application has closed, it cannot be reopened.

Your initial application for the IdenTrust Global Common (IGC) digital certificate will remain open for 45 days which will give you time to complete and submit your forms packet if required, and electronically verify your email. When 45 days has elapsed without usable paperwork being submitted or email verification, the application will close and you will need to complete a new application.

For Medium Assurance Certificates:
Once the notary or Trusted Agent signs the Part 2 form verifying your ID documents, a 90-day countdown begins. This means that you have 90 days from that date to send in your forms, be approved for the certificate and to retrieve the certificate. This is a requirement of the certificate policy and as such, once the 90 day window has passed a new application and forms packet will need to be completed.

For Basic Assurance Certificates:
Once you have completed email verification and been approved for the digital certificate, a 90-day countdown begin. This means that you have 90 days to retrieve the certificate. This is a requirement of the certificate policy and as such, once the 90 day window has passed a new application and forms packet will need to be completed.

Once an application has closed, it cannot be reopened.

The application requires that multiple verification steps be completed before it can be approved. Because of this, the approval process cannot be expedited. 
You do have the option to request expedited shipping of the activation kit once the application has been approved. You may select expedited shipping during the application process, or you may contact our Support team at (888) 339-8904 to request and pay for expedited shipping with either a FedEx account number, or your credit card. 

Please note: Once your application is approved, it will take up to 24 business hours for the activation kit to ship. 

Yes, you can use a Notary Public to comply with the in-person verification requirement. However, verification by a Notary is valid ONLY for ECA | Medium Assurance and ECA | Medium Token Assurance certificates. 

If you need to obtain an ECA | Medium Hardware Assurance certificate, you must contact a Trusted Agent within your organization or an IdenTrust Registrar (RA Operator or Trusted Agent).  

Refer to our datasheet Who Can Sign the Part 2 Form for ECA certificates.

Yes.  For ECA | Medium Assurance | Software Storage | Non-U.S. and ECA | Medium Token Assurance | Hardware Storage | Non-U.S. certificate applications, U.S. citizens may apply for a digital certificate while in any country with a U.S. Consulate. Upon completion of the online application, identity forms must be signed in the presence of a U.S. Consular Officer who is authorized to provide notarial services. Alternatively, U.S. citizens may apply for a digital certificate in a country where an Authorized DoD Employee (ADE) has been established, or where the citizen has access to a Judge Advocate General (JAG).

Citizens of Australia, Canada, New Zealand or the United Kingdom, while in any of these four countries, may apply for a digital certificate by completing the online application and retrieving the identity forms. Identity forms must be signed in the presence of a U.S. Consular Officer who is authorized to provide notarial services. Alternatively, citizens of these four countries may apply for a digital certificate in a country where an Authorized DoD Employee (ADE) has been established.

Citizens of other countries require that identity forms are signed in the presence of an Authorized DoD Employee (ADE). If you do not already have an ADE, one will need to be established before you apply. Please contact the IdenTrust Help Desk for instructions in setting up an Authorized Individual by calling 1(801) 384-3474 or by email to [email protected].  

Learn more about Non-U.S. ECA certificates.
  

Yes. After you have submitted a purchase order, IdenTrust will provide Voucher Numbers that you can distribute to applicant(s).  These vouchers are used during the application process as the method of payment.

The purchase order process requires that you also submit a completed voucher form. 

• ECA Certificates Voucher Order Form
• IGC Certificates Voucher Order Form
• TrustID Certificates Voucher Order Form

Purchase order requests under $500 cannot be accepted.

Please fax purchase orders for digital certificates and/or hardware to 1 (801) 415-7083.

You may check the status of your order by logging into your account with your application ID and account password. 
To check your status, click here: Application Status

According to the ECA Program policy, an applicant can prove their citizenship using a valid passport issued by the country of citizenship. You should bring your passport to the in-person identity verification appointment. Either the Trusted Agent, the Notary Public, the U.S. consul or an authorized IdenTrust employee will verify your citizenship using your passport.  

The ECA program Certificate Policy (CP) and IdenTrust Certification Practice Statement (CPS) require that citizenship be proved based on a valid passport. If you are citizen of a non-U.S. country and you do not have a passport, you are not eligible to obtain a certificate under the ECA Program. However, if you are citizen of the United States, you can also prove your citizenship based on the following documents:

1. Birth Certificate. Certified birth certificate issued by the city, county, or state of birth, in accordance with applicable local law. A certified birth certificate has a registrar's raised, embossed, impressed or multicolored seal, registrar’s signature, and the date the certificate was filed with the registrar's office, which must be within 1 year of birth. A delayed birth certificate, filed more than one year after birth, is acceptable if it lists the documentation used to create it and is signed by the attending physician or midwife, or lists an affidavit signed by the parents, or shows early public records. 
2. Naturalization Certificate. A Naturalization Certificate is a document issued by the U.S. Citizenship and Immigration Service (USCIS) since October 1, 1991, and the Federal Courts or certain State Courts on or before September 30, 1991, as proof of a person obtaining U.S. citizenship through naturalization. 
3. Certificate of Citizenship. A Certificate of Citizenship is a document issued by the U.S. Citizenship and Immigration Service (USCIS) as proof of a person having obtained U.S. citizenship through derivation or acquisition at birth (when born outside of the United States). 
4. FS-240 - Consular Report 
5. DS-1350 - Certification of Report of Birth 
    

If you require the ECA Hardware Assurance certificate, you can schedule an in-person identification session with one of our Trusted Agent. To do so, please call our Support team at (888) 882-1104. 

Certificates are processed in the order each request is submitted, and the required paperwork is received. If during the validation phase IdenTrust requires additional information, the process may take longer. 

Any hardware requested will be shipped to the mailing address on the application once the application has been approved. Unless expedited shipping was purchased, the package will deliver 3-5 days after shipping.

Certificates are processed in the order each request is submitted, and the required paperwork is received. Once approved, an email is sent to the certificate requestor which will allow immediate certificate retrieval. If the certificate request includes a USB Token or Smart card, the hardware will be shipped to the mailing address provided during the online registration.

You can include multiple citizenships in your application. The citizenships you include will be used by IdenTrust to issue your certificate and Relying Parties will use the citizenship information within the certificate to establish your access to their applications. IdenTrust has designed its registration processes to easily accept up to three citizenships.

If you need to include more than three citizenships please contact the IdenTrust Registration Desk directly at 1 (888) 882-1104 within the U.S., or 1 (801) 384-3474 outside of the U.S.

Unfortunately IdenTrust is unable to publish this information that is managed by a government agency. However, please contact our Support team at (888) 882-1104 for further assistance in identifying an ADE.

The ECA program Certificate Policy (CP) and IdenTrust Certification Practice Statement (CPS) require that citizenship be proved based on a valid passport. If you are citizen of a non-U.S. country and you do not have a passport, you are not eligible to obtain a certificate under the ECA Program. However, if you are citizen of the United States, you can also prove your citizenship based on the following documents:

1. Birth Certificate. Certified birth certificate issued by the city, county, or state of birth, in accordance with applicable local law. A certified birth certificate has a registrar's raised, embossed, impressed or multicolored seal, registrar’s signature, and the date the certificate was filed with the registrar's office, which must be within 1 year of birth. A delayed birth certificate, filed more than one year after birth, is acceptable if it lists the documentation used to create it and is signed by the attending physician or midwife, or lists an affidavit signed by the parents, or shows early public records. 
2. Naturalization Certificate. A Naturalization Certificate is a document issued by the U.S. Citizenship and Immigration Service (USCIS) since October 1, 1991, and the Federal Courts or certain State Courts on or before September 30, 1991, as proof of a person obtaining U.S. citizenship through naturalization. 
3. Certificate of Citizenship. A Certificate of Citizenship is a document issued by the U.S. Citizenship and Immigration Service (USCIS) as proof of a person having obtained U.S. citizenship through derivation or acquisition at birth (when born outside of the United States). 
4. FS-240 - Consular Report 
5. DS-1350 - Certification of Report of Birth 
    

Unfortunately, no. Each certificate must be applied for individually by the person who needs it. 

When applying for a certificate, our Certificate Selection Wizard will assist you in choosing the best certificate to meet your needs.

The certificate policy requires that applicants for ECA | Medium Hardware Assurance | Trusted Agent Identity-Proofing Required certificates have their identity validated by a Trusted Agent, approved by IdenTrust or the DoD. A notary’s review does not sufficiently meet this requirement.

When IdenTrust is verifying your identity, certain ID information is required such as the driver's license, social security card, or other details. If we are unable to verify those details, you will be asked via email to submit notarized documentation supporting what is listed on your application. Without this information, we cannot approve your certificate application.

Please have a copy of the document(s) notarized and mail to: 

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116 

Sometimes the required ID fields are missing details, such as the legal name, issue/expire date or document title. A copy of your ID is needed to confirm the missing details and to authenticate your identity.  If the details cannot be authenticated, a new Part 2 form will be requested.

If the serial/unique number is missing from the field, a new Part 2 form must be completed and sent in for processing. The original or notarized copy of the original document(s) should be sent to:

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116 

Address and phone verification are a necessary part of the identity verification required to obtain a digital certificate. If you receive an email requesting documentation, be sure to send either the original, or a notarized copy of the document.

Accepted documents are:

• Driver's license or state ID
• Utility bill dated in the last 30 days
• Phone bill dated in the last 30 days
• Rental agreement
• Other documents can be reviewed on a case by case basis.

Please mail the original or notarized copy of the confirming document to:

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116


Please contact [email protected] for more information on the document you would like to submit. 

Digital certificates retrieved into a browser, also known as software certificates, are intended to be used mainly from a single computer. As no additional device is required, software certificates are relatively inexpensive.

Digital certificates retrieved into a portable hardware device such as USB token or Smart card, not only can be used from multiple computers, but also offer additional security via the built-in second factor authentication feature. Certificates stored in hardware devices can also be configured for Client Authentication for faster secure login sessions.

The decision to opt for a software or a hardware certificate is mainly predefined by the sponsoring organization (business); at an individual level, the applicant should weigh-in if the additional security and portability benefits are worth the hardware expense. 

Note: Be sure to check with your relying party or program to determine if it requires a specific type of storage:

• Software
• USB token
• Smart card 

Part 1:

Forms sent to IdenTrust are sometimes missing required information such as the organization officer’s signature, title, email and/or phone number, as well as the date it was signed. It’s also possible the form does not show the organization name and/or address that was listed on the online application.

If information is missing, you will receive an email outlining what was missing on the form, as well as a copy of a blank Part 1 form.

Part 2:

Forms require a number of fields to be filled out, some of which sometimes get missed. Most common fields are the signatures of the applicant and/or notary, specific details about the IDs presented for verification, and the email address either missing or not matching that listed on the application. There can be other errors with the form as well.

If information is missing, you will receive an email outlining what was missing on the form, as well as a copy of a blank Part 2 form.

Please send the complete, original form(s) to: 

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116

The IGC certificate policy requires certain forms of ID be provided at the time of in-person identification with the notary. Please be certain that all fields in your application form are completed to avoid delays in the approval process.

View our pdf document Identity Verification for IGC Certificates for detailed instructions.

The TrustID certificate policy requires certain forms of ID be provided at the time of in-person identification with the notary. Please be certain that all fields in your application form are completed to avoid delays in the approval process.

View our pdf document TrustID | Identity Verification Requirements for detailed instructions.

The certificate policy requires certain forms of ID be provided at the time of in-person identification with the notary, Trusted Agent or ADE. Please be certain that all fields in your application form are completed to avoid delays in the approval process.

View our pdf document Identity Verification Requirements DoD ECA Certificate Policy for detailed instructions.

View our pdf document Identity Verification Who Can Sign the Part 2: In-Person Identification Form DoD ECA Certificate Policy for detailed instructions.

The FATCA program does not provide guidance on the FQDN you should use; therefore you may choose any Fully Qualified Domain name.  However, IdenTrust requires that the FQDN is owned or controlled by your organization and that is not an internal name. You can choose a subdomain name from a domain name you own/control. For example, if you own the domain name “mydomain.com”, you could choose “fatca.mydomain.com”.

You must not use an internal name such as: myorganization.internal, myorganization.localhost, or myorganization.example. 

Once you hit ‘submit’, there are a few things that you need to do before IdenTrust can process the application:

.

1.  Please verify your email.

An email from [email protected] will be sent to the email address you listed in your application asking you to verify your email address. This email contains a unique verification code which you will use in addition to your account password to verify the email address. This verification is only done electronically. Please check your inbox, junk and spam folders to locate the email.

2.  Complete your forms packet.

You were directed to print a copy of the forms packet at the end of your online registration. Complete both the Part 1 and Part 2 forms, following the instructions listed on the 2nd page of the packet.

3.  Send the completed form to:

   IdenTrust Registration
   5225 Wiley Post Way, Ste 450
   Salt Lake City, UT 84116

If you no longer have your forms packet available, you can find the appropriate packet in our ECA Document Library.

4.  IdenTrust reviews your application.

Once IdenTrust receives the completed forms packet, it will be reviewed and authenticated for accuracy. IdenTrust will validate your association with the organization listed on your application and will verify the details included on the application, as well as on the forms. 

After these validation steps have been completed, your certificate request will be approved. An activation kit will be sent to you, including the approval letter and any applicable hardware ordered. Unless you requested expediting shipping during the online registration, the kit will be sent via standard mail (for letters), and FedEx Ground (for hardware orders). 

5.  Retrieve your certificate.

After you receive your activation kit, please complete the steps outlined in the approval letter to retrieve your certificate. 

To maintain the integrity of the information provided to IdenTrust, we are unable to make any alterations to the details entered during the online registration process.  If you do find a mistake that must be corrected, please cancel the application and submit a new application for processing. New paperwork (if required for the certificate type) must match the details of the new application you submit.

You may contact our Support team at 1 (888) 248-4447 to request the application be cancelled. 

Once your application has been approved the information cannot be updated in your certificate.  However, certain information provided during your initial application can be updated via our Certificate Management Center.  Some information can be updated immediately, while others will have to wait for the renewal process. Some changes will require you submit a new certificate application.  A few examples of changes include:

My mailing address has changed.

You can update the mailing address on your account at any time through the Certificate Management Center.

1. In the section titled 'Manage Your Account Information', select 'View/Update Account Information'.
2. Make the needed changes and select 'Finish'.

My headquarters address has changed, or my company's name has changed.

Unfortunately, you are unable to make changes regarding your organization name and/or address.  A new application will have to be submitted with the new organization information.

If you use the certificate to gain access to a federal or state agency, you may have to re-register with the new company information prior to being able to use the new certificate. Please contact the appropriate agency for further clarification.

My email address has changed. 

You will have the option to change the email address associated with your certificate during the renewal process. It cannot be changed prior to a renewal.

 

My name has changed.

You will be asked to confirm your name during the renewal process, at which time you can update to your current legal name.  You may be asked to send in proof of the name change if our Registration Department is unable to verify it.

• Marriage Certificate
• Divorce Decree (1st, last and page showing the name change)
• Other court-issued documentation

If you require a certificate with your new name, you will need to purchase a new certificate.
 

You may access your account through the Certificate Management Center by logging in with your certificate. 

A voucher is an alpha numeric sequence that is provided by IdenTrust as an alternative payment method to a credit card. You will provide the voucher number during the online registration as a method of payment.

You can obtain a voucher number from IdenTrust using a purchase order or paying with a credit card.

Purchase ECA | Vouchers

Purchase IGC Standard | Vouchers

Purchase IGC Prescribing | Vouchers

Purchase IGC Agencies | Vouchers

Purchase IGC Notaries | Vouchers

Purchase TrustID Vouchers

The application process for a digital certificate is generally a 4-step process.

1.  Apply for Your Certificate
 

• Use the My Buying Community menu or the Certificates menu to select the category that is most comparable to your situation.  Here you can learn more about the types of certificates that are offered under these programs. 
• Once you are ready to initiate a purchase, you can select any BUY button to launch our Certificate Selection Wizard.  The wizard will assist you in selecting the certificate that is appropriate to your situation. 
• Verify your selections in your "shopping cart" and submit using the BUY NOW button.
• You will be directed to the "checkout" process where you will provide your personal information and provide payment information.

Note: You will also be asked to enter a Password when you apply. Please record this Password and store it in a secure place. You will need this Password to retrieve your digital certificate.

Notary Form: In addition to the online application, some certificate applications require that you complete a notary form and submit it to IdenTrust.  If required, the form will be provided for you to download at the end of the online application process.

2.  Certificate Application Processing

Your application will undergo the approval process which can include authenticating identity information, authenticating paperwork, verifying organization information, and verifying organization affiliation.

3.  Receive Your Approval Notification

Once approved, you will receive notification from IdenTrust.  The method will vary based on the type of certificate you have purchased:

• Notification with with the activation code will be emailed to the verified email listed during registration.
• In cases where you have purchased a hardware device for certificate storage, such as a Smart Card, USB token, then you will also receive a kit containing the purchased hardware and software.

4. Retrieve Your Certificate:

Follow the instructions in the approval notification, which will include:

• Retrieval and installation of your certificate via the secure IdenTrust website.
• Installation of storage hardware and software, if applicable.
• Testing your certificate.

The application process for a digital certificate is generally a 4-step process.

1.  Apply for Your Certificate
 

• Use the My Buying Community menu or the Certificates menu to select the category that is most comparable to your situation.  Here you can learn more about the types of certificates that are offered under these programs. 
• Once you are ready to initiate a purchase, you can select any BUY button to launch our Certificate Selection Wizard.  The wizard will assist you in selecting the certificate that is appropriate to your situation. 
• Verify your selections in your "shopping cart" and submit using the BUY NOW button.
• You will be directed to the "checkout" process where you will provide your personal information and provide payment information.

Note: You will also be asked to enter a Password when you apply. Please record this Password and store it in a secure place. You will need this Password to retrieve your digital certificate.

Notary Form: In addition to the online application, some certificate applications require that you complete a notary form and submit it to IdenTrust.  If required, the form will be provided for you to download at the end of the online application process.

2.  Certificate Application Processing

Your application will undergo the approval process which can include authenticating identity information, authenticating paperwork, verifying organization information, and verifying organization affiliation.

3.  Receive Your Approval Notification

Once approved, you will receive notification from IdenTrust.  The method will vary based on the type of certificate you have purchased:

• Notification with with the activation code will be emailed to the verified email listed during registration.
• In cases where you have purchased a hardware device for certificate storage, such as a Smart Card, USB token, then you will also receive a kit containing the purchased hardware and software.

4. Retrieve Your Certificate:

Follow the instructions in the approval notification, which will include:

• Retrieval and installation of your certificate via the secure IdenTrust website.
• Installation of storage hardware and software, if applicable.
• Testing your certificate.

You may select the appropriate required forms packet in our Document Library.

• ECA | Forms
• IGC | Forms
• TrustID | Forms

Please be sure to select the correct forms packet. If you are unsure, please contact our Support team at [email protected] for assistance.

As required by the governing certificate policy, you may be asked to provide additional documentation needed to process your application. If necessary, this additional document request will be sent via email. Please read the full email to identify what document is being requested and follow the steps outlined to provide requested documentation.
 

When applying for a digital certificate, you will be asked to select your payment method. You will have the following options for payment: 

Credit Card 
 
You will be asked to enter your credit card information during the online application process. 
Make sure that you have the correct billing address for your credit card; this will be entered during the online payment process. 
 

Voucher Number 

• Voucher numbers are issued by IdenTrust to allow the purchase of a single digital certificate with each voucher number. These voucher numbers are used as the form of payment during the online application. 
• You can order a set of voucher numbers to distribute to employees within your organization or to business partners. 
• Voucher numbers are issued to specify the purchase of a particular certificate type, and are valid for one year. 
• Voucher numbers may be purchased with a credit card or a Purchase Order. If using a Purchase Order, the minimum order requirement is $500 and the following applies:

             - IdenTrust must receive your Purchase Order before the issuance of voucher numbers.

             - Purchase Orders must include a completed Voucher Order Form with the order.

             - Requests must be submitted to IdenTrust Registration at [email protected] or fax to 1 (801) 415-7083.

To purchase using a credit card, simply select from the list of products below and you will be directed to our online purchasing system:

  Purchase ECA Vouchers

  Purchase IGC for EPCS Vouchers

  Purchase IGC for Digital Signing and Sealing Vouchers

  Purchase TrustID Vouchers

When applying for a certificate where you are asked to list an Organization, you should identify exactly which Organization you need to enter.
Usually the Organization you list when applying is the Organization you work for, but there are scenarios where you may need to consider something else. If you are a contractor applying for the certificate needed for another company, you may need to list that Organization instead of your own. Be sure to check with your organization if you are unsure what you should list on your application.

Your Organization may have a Trusted Agent. The individual who requested that you obtain an ECA Program certificate should know the contact information for that person. If you do not have the means to obtain this information, contact IdenTrust for further details at 1 (888) 882-1104.

Additionally, IdenTrust has made available Trusted Agent in the following areas:

• San Antonio, TX
• Clermont, FL
• Fremont, CA
• Salt Lake City, UT
• Virginia

IdenTrust Trusted Agents may travel up to one hour to complete Identity Verification (I&A) for ECA | Medium Hardware Assurance | Trusted Agent Identity-Proofing certificate requests. 

If requesting an ECA | Medium Assurance or ECA | Medium Token Assurance, please make arrangement meet with a notary instead. 

You may contact IdenTrust to set up an appointment.  

The identity proofing for the Part 2 - ID Form can be completed in-person by either a notary, your organization's Trusted Agent, or an IdenTrust Registration Analyst.

If you are in the Salt Lake City, UT area, you may schedule an in-person session with our Registration team. Please contact our Support team at (800) 748-5360.

Order Numbers are a good solution for organizations that would like to purchase a large quantity of certificates, but do not want to have to manage multiple voucher numbers. 

When an Order Number is requested and approved, the organization's Order Number administrator will receive the Order Number as well as a custom URL which can then be distributed to those who need to obtain the digital certificate. 

To request an Order Number, please send an email to <a href="mailto:[email protected]">[email protected]</a> and provide the following:

• Which certificate you would like to order
• For hardware-based certificates, if you would like the USB token or a Smart card
• How many certificates are needed
• With which program do you plan to use the certificate

Payment is not collected until the application for the certificate has been approved; however, the credit card is authorized and funds are placed on hold. Certificates that are not affiliated with a business have an additional authorization hold placed:

• As part of the identity verification process the credit card has a $1.00 authorization hold placed on it. This authorization hold will remain on the card for 3-5 business days, dependent on the bank. 
• An additional hold, in the amount of the certificate cost is also placed on the credit card when entered on the payment page of the application. This authorization hold will also remain on the card for 3-5 business days. Once the certificate application is approved the card will be charged and the funds will be collected by IdenTrust.

The certificate policy requires the confirmation of identity be signed with a handwritten signature.

• The organization officer's signature on the Part 1 form must be original and dated.
• The signatures (both yours and the notary's) must also be original.

IdenTrust must receive the original wet-ink signature to confirm the signatures are original and not a stamp or photocopy.
 

We advise making a photocopy of the forms for your records, but the original, wet signature (pen to paper) forms must be submitted for processing.  Please send the signed, original forms to:

 IdenTrust Registration
 5225 Wiley Post Way, Ste 450
 Salt Lake City, UT 84116
 

IdenTrust is required by policy to verify the details listed in your application including the organization name, address, city, state, zip code as well as to independently verify a phone number registered to the organization. We attempt to verify this information using trusted third-party databases that contain corporate information. However, if detail cannot be verified, we will send an email requesting additional documentation.

Why can't you just look up the address or phone number online?

The policy requires that IdenTrust use trusted databases that contain the organization information to be verified. IdenTrust uses multiple data-sources that have been pre-approved and cannot use corporate websites or other websites that have not been approved.

 

What forms of documentation can I provide to confirm my organization's identity or phone number?

Registration documents from a secretary of state or other government registry are accepted.

Government issued documents that attest to the organization's legal existence, certificate of good-standing, or other approved documents attesting to the organization's existence are also accepted.

Please provide the original document or a notarized copy of the original. This is to ensure authenticity of the document and that there is no indication of forgery, fraud, tampering, etc.

Send the original or notarized copy of the original document(s) to:

   IdenTrust Registration
   5225 Wiley Post Way, Ste 450
   Salt Lake City, UT 84116 

Citizenship is used as part of the criteria for authorizing restricted access to online applications that are hosted by  ECA Relying Parties. The ECA Program is governed by a Certificate Policy requiring that all applicants provide proof of their citizenship in order to be issued an ECA certificate.  

Most applications require only an ECA | Medium Assurance or an ECA | Medium Token Assurance certificate. There are only a handful of agencies that require the higher assurance ECA | Medium Hardware Assurance certificate.  Our Certificate Selection Wizard will guide you through the process of selecting the correct assurance level that is required by the agency or agencies with which you will be interacting.   

To confirm what certificate type you need, we suggest you select DoD ECA Programs from the Certificate drop down menu which will allow you to initiate the Certificate Selection Wizard.

• Choose the BUY NOW button. 
• From here, the Certificate Selection Wizard will prompt you to select the agency or agencies that you work with. 
• Then choose NEXT. 
• Step through the wizard and you will be presented with the certificate options that are accepted by the agency or agencies you have selected. 
• Complete the wizard process and purchase your DoD ECA certificate

If your relying party does require a ECA | Medium Hardware Assurance certificate, you will need to meet with a Trusted Agent to obtain the required in-person identity-proofing for the certificate. You can scheduled an in-person identification session with one of our Trusted Agents by contacting our Support team at 1 (888) 882-1104.

A Non-U.S. applicant is anyone residing and/or working outside of the United States. Non-U.S. applicants are eligible to apply for the following certificate types:

• ECA | Certificates - Applications accepted in a limited number of approved countries.
• TrustID | Business Identity Certificates - Applications accepted in all countries except those restricted by the U.S. Federal Government.
• TrustID | Secure Email Certificates - Applications accepted in all countries except those restricted by the U.S. Federal Government.
• TrustID | FATCA Certificates - Applications accepted in all countries except for those restricted by the U.S. Federal Government.
• IGC | Business Identity Certificates - Applications accepted in all countries except those restricted by the U.S. Federal Government.
• IGC | Device Certificates - Applications accepted in a limited number of approved countries.

View our Supported Countries list.