Certificates > ACES
|
ACES enable individuals and businesses to conduct business with the government electronically via
the use of digital signature technology. In September 1999, the U.S. General Services
Administration (GSA) named IdenTrust as the first ACES Certificate Authority(CA) to operate
its digital certificate and repository services under the ACES contract; thereby enabling
IdenTrust to issue digital certificates under ACES task orders from federal agencies.
ACES is a federal government sponsored program that allows online access to
personal information and government agency services through the use of digital
certificates. As an ACES-accredited certification authority, IdenTrust issues
digital certificates that authenticate the identity of individuals, representatives
of organizations and government agencies involved in the GSA ACES program.
IdenTrust Test Certificate: If you are an application owner and need to test your system as part of the PKI process,
click here to request an IdenTrust ACES Test Certificate.
|
Facts about the ACES Program
|
| |
 |
Much of the impetus behind ACES flows from the Government Paperwork Elimination Act (GPEA), which mandates that agencies shift paper processes to the Internet by 2003. |
| |
|
The primary goal of ACES is to leverage information technology to deliver comprehensive government services to Americans and to dramatically increase government productivity. |
| |
|
ACES is intended to enable individuals and businesses to efficiently conduct business with the government electronically via the use of digital signature technology. |
| |
|
Government agencies, individuals, and individuals acting on behalf of businesses may receive digital certificates that positively identify them online. |
| |
|
ACES certificates enable agencies to authenticate users for access control as well as file/form submission. |
|
IdenTrust ACES Certificate Center is an online process where agency employees, individuals, and
individuals acting on behalf of businesses can apply and purchase ACES certificates. There are two
types of ACES certificates:
|
Business Representative
|
| |
|
Authenticate yourself as an employee of a government agency or valid business |
| |
|
Digitally sign documents to replace "ink" signatures (e.g. signing a contract) |
| |
|
Authenticate yourself to gain access to a PKI-enabled application (e.g. a secure web server) |
| |
ACES Business Representative certificates are intended to be used at the medium level of
assurance relevant to environments where risks and consequences of data compromise are
moderate. This may include transactions having substantial monetary value or risk of fraud,
or involving access to private information where the likelihood of malicious access is
substantial.
|
|
Unaffiliated Individual
|
| |
|
Authenticate yourself |
| |
|
Digitally sign documents to replace "ink" signatures (e.g. signing a contract) |
| |
|
Authenticate yourself to gain access to a PKI-enabled application (e.g. a secure web server) |
| |
ACES Unaffiliated Individual certificates are intended to be used at the basic level of assurance
relevant to environments where there are risks and consequences of data compromise, but they are
not considered to be of major significance. This may include access to private information where
the likelihood of malicious access is not high. It is assumed at this security level that users
are not likely to be malicious.
|
|
ACES DEVICE CERTIFICATES
Agency Application TLS/SSL Server Certificates
|
| |
|
Authenticates and encrypts data transmission |
| |
|
Enables authenticated, encrypted communications with servers and applications |
| |
|
Allows mutual authentication and/or encrypted TLS/SSL communications between devices operated by federal, state or local agencies or government contractors |
VPN IPSec Client Certificates
|
| |
|
Authenticates and Encrypts data transmission |
| |
|
Enables authenticated, encrypted VPN communications |
| |
|
Allows mutual authentication and/or encrypted TLS/SSL communications between devices operated by federal, state or local agencies or government contractors |
Send your Request for a quote to ACESsales@IdenTrust.com. Be sure to indicate whether you are interested in purchasing ACES TLS/SSL or ACES VPN IPSec Certificates.
|
|
BUY YOUR ACES CERTIFICATE
|
|
Warning, to protect the identity of ACES certificate holders, only the
certificate holder should be using the digital certificate. Allowing
others to use your certificate through sharing your password, passphrase
or private key weakens the security of the system and presents a
security danger to the certificate holder. Those certificate holders
found to have shared this confidential information will be notified
that their certificates can be revoked.
|
|
