Comodo Secure Operations
Comodo provides services which require the highest possible levels of trust and integrity. To meet such requirements Comodo has invested heavily in the providing both physical and logical security for the Certification Authority operations.Comodo employs policies and practices that have been designed to meet or exceed the requirements of the AICPA/CICA WebTrust Program for Certification Authorities, ANS X9.79:2001 PKI Practices and Policy Framework, and other industry standards related to the operation of CAs. Comodo is currently undergoing WebTrust compliancy testing.
To date, Comodo have issued tens of thousands of validated SSL and secure email digital certificates through our secure Certification Authority operations. The advanced physical and logical security and validation practices and procedures ensure that all Comodo certificates are highly trusted.
Key elements of security and service integrity employed are detailed below. For further information on the Comodo operations are available in our Certification Practice Statement - available at the Comodo repository.
Use of Hardware Security Modules for Key Protection and Certificate Generation
Comodo securely generates and protects its own private key(s), using a trustworthy system (IBM 4758 accredited to FIPS PUB 140-1 level 4), and takes necessary physical and logical precautions to prevent the compromise or unauthorized usage of such devices. All digital certificates issued are issued using IBM 4758 hardware security modules.Comodo Digital Trust Lab
The world renowned Digital Trust Lab Research and Development Center
With its dedicated team of R & D engineers, the Comodo Digital Trust Lab specializes in design and development of next generation Internet security solutions. Comodo collaborates with leading industry participants such as IBM, HP, Microsoft and Intel to implement a vision of security through invention and innovation. Core development areas include Certificate Services, ASIC design house and fabless semiconductor work, software development and design, infrastructural projects including the idAuthority (the world's only real-time identity assurance infrastructure), and cryptographic research and analysis.Physical CA Operations
Access to the secure part of Comodo facilities is limited through the use of physical access control and is only accessible to appropriately authorised individuals (known as Trusted Personnel). Card access systems are in place to control, monitor and log access to all areas of the facility. Access to the Comodo CA physical machinery within the secure facility is protected with locked cabinets and logical access control.The secure facilities are protected from fire and smoke damage (fire protection is made in compliance with local fire regulations) and flood and water damage
Comodo secure facilities have a primary and secondary power supply and ensure continuous, uninterrupted access to electric power. Heating / air ventilation systems are used to prevent overheating and to maintain a suitable humidity level.
Comodo employ a redundant CA system to ensure uninterrupted service levels. Comodo also utilise secondary server and operations sites.
If you would like further details on the Comodo secure facilities please contact legal@comodogroup.com.
All about Comodo Group
Comodo's range of solutions gives businesses the ability to create online trust through proprietary technology that help e-businesses convert more customers, retain more customers and increase lifetime value. From providing certificates that put the trusted padlock on websites to patented technologies that lets internet users verify legitimate web content from faked content, Comodo empowers businesses and consumers to authenticate each other and protect their digital identities.Our Credentials are Impeccable
Comodo is the 2nd largest Certification Authority for ensuring Identity Trust & Assurance on the web. Our third generation solutions are setting the standards for Identity and Trust Assurance to ensure both consumers and business' true e-identity and e-business authenticity. When a consumer sees or an e-merchant displays either a Comodo Content Verification Certificate or a HackerGuardian TrustLogo or a High Assurance SSL Certificate, they know they are assured of complete legitimacy and safety.What Comodo Offers
Comodo provides a growing range of Identity and Trust Assurance encryption, verification and authentication services and security applications for business users, as well as for consumers. Our solutions work across all platforms, including Linux. In addition, we offer the only free online website identity assurance database (idAuthority) - maintained by a worldwide dedicated team of engineers at our Digital Trust Lab. Users can research any online business through Comodo.Some Fast Facts about Comodo
- Headquarters in Jersey City, USA with global offices in UK, Ukraine and India
- Exclusive provider of digital security services to top level domain name registrants
- More than 200,000 customers in more than 100 countries, securing 500,000+ businesses and individuals
- 4500 strong global partner network
- Operates one of the world's largest fastest growing Certification Authority infrastructures with the highest standards as evidenced by our KPMG annual audits
- World-renowned Digital Trust Lab Research and Development Center
- Contributing member of the Trusted Computing Group
