Trusted Root CA Certificate

Get Immediate trust for your SSL, S/MIME and code signing certificates by root signing / chaining your Microsoft Certificate Services CA or Inhouse CA Root Certificate to the pre-trusted GlobalSign root certificate

In recent years many enterprises and major organisations have established their own Enterprise Certificate Authority (CA) such as the Microsoft CA with the primary goal of enhancing security for an ever increasing number of diverse web based business processes.  For an enterprise to establish their own Enterprise CA it must self-sign a CA Root Certificate, which is then used to issue digital certificates to employees, extranet users and even machines and services.  Such certificates can then be used to digitally sign and encrypt communications and also to control access to web resources.  However this self-signed Root CA Certificate is not automatically trusted by main-stream operating systems (such as Microsoft Windows), browsers (such as Microsoft Internet Explorer, Mozilla Firefox) or email clients (such as Microsoft Outlook).  This inability to trust causes warning messages to be displayed, resulting in a lack of confidence by staff and increased cost for support and training. 

To avoid these warnings the enterprise would be forced to either accept the increased support costs or to undertake a Root Embedding Programme to have the self-signed Root CA Certificate inserted into all operating systems, browsers and applications.  Such a program is expensive and labour intensive, taking many years before the enterprise’s Root CA Certificate is sufficiently ubiquitous to be used without support issues.  The time and cost associated with an Embedding Program massively outweigh any advantage that would be associated with implementing an Enterprise CA solution.

Today, there is no need for such CAs to have their Root Certificate directly embedded in browsers to create the necessary feeling of trust. GlobalSign has made available a simple solution for CAs to chain themselves directly to GlobalSign's pre-embedded Root Certificate: Trusted Root.

As a leading WebTrust accredited Certification Authority, GlobalSign has maintained its own pioneering Root Embedding Programme for over 10 years and now the GlobalSign Root CA Certificate is trusted by practically all mainstream browsers and applications. With GlobalSign’s Trusted Root there is no need for individual Enterprise CAs to have their own Embedding Programme, instead GlobalSign allows use of its own ubiquitous Root CA certificate to give the customer its own set of new, but highly trusted, Root CA certificates.  The customer then immediately inherits the trust associated with the GlobalSign Root CA which provides an easy way for certificates issued by the enterprise to be transparently accepted in all popular applications, thereby eliminating the costly support issues.