Medium Assurance Identity/Encryption Certificates
- Easy online request process for either 1 or 3 year certificates.
- Software only; no hardware needed. Installs into Internet Explorer and Firefox.
- Allows access to NSA ARC Net, GSA eOffer/eMod, and most DoD sites, for example CPARS and SPOT.
- An ECA certificate pair is used for:
- Identity Certificate: accessing websites and digitally signing emails.
- Encryption Certificate: exchanging encrypted emails.
A Medium Assurance Identity Certificate is used by a person to authenticate to a PKI-enabled application, such as a secure web site. Identity certificates may be used for non-repudiation purposes, i.e., transactions that have been signed by an identity certificate may be legally linked to the owner of that certificate. The certificate may also be used for secure and authenticated email.
A Medium Assurance Encryption Certificate may be used for encrypting e-mail. When encrypting e-mail messages, the sender uses the certificate of the recipient(s), and the recipient decrypts the message using his or her private key. An encryption certificate cannot be issued for an individual without issuing a identity certificate for that individual first.
Steps to obtain your certificates
- Step 1: Read the requirements.
- Step 2: Gather the required documents.
- Step 3: Trust the CAs.
- Step 4: Fill out and print the online request forms.
- Step 5: Make a backup copy of your enrollment keys.
- Step 6: Have the printed request forms (with the required documents) notarized. Mail the documents to ORC, and await receipt of your digital certificates.
Proceed to Step 1 to read the requirements