2. Industry news

3. Industry ?

4. Industry ? 2
AOL
Always on SSL
All on SSL  by 2020, 100% of the online traffic will be https secured therefore more SSL requirements

5. Industry ? o>75% of page loads in Chrome over https
o>50% of page loads in Android over https

6. Industry ?

7. Industry ?

8. Industry ?

9. Competition?

10. Competition ? Symantec CIC & mPKI/CWS Digicert mPKI GlobalSign MSSL
Comodo CCM

11. Who’s Entrust?

12. Who’s Entrust Datacard
Formerly ENTRUST & Datacard Group
Founded in 1969
Approximately $600M annual revenue
2000 employees in 34 worldwide locations
+10M identity & payment credentials issued daily
Billions of transactions managed annually
Part of the CA/B forum
First Certification Authority (CA) Webtrust Certified in 2001
Premium CA: entrust/all/all

13. Who’s Entrust Datacard

14. Entrust SSL Range We have SSL certificates to meet all your needs
Entrust WildCard SSL*
Entrust EV Multi-Domain SSL* (1+1)
Entrust UC Multi-Domain SSL (1+3)*
Entrust Advantage SSL (1+1)*
Strong Encryption
Full ECC
Entrust Standard OV SSL*
Entrust Private SSL*
Symantec
Secure Site Pro
Symantec Secure Site Pro EV
ECC Technology
64,000 time more secured than 2048-bit RSA
Mobile Device Friendly (256-bit key length)
Faster connection than RSA
Weak Encryption
RSA
Symantec Secure Site
Symantec Secure Site EV
Internal Use Domain Validation
DV (software)
External Use Organisation Validation OV
External Use Extended Validation EV - (green bar)
* Unlimited licenses

15. What’s in the Entrust mPKI
Instant Issuance of OV and EV certificates
Pre-validation of the Organisation/s
Pre-validation of the Domains (for each pre-validated organisation if required)
Qualys SSL Labs Health Check
User Management:
Rights limitations: certificate workflow, allocation of units, logs
User Roles: Super-Admin, Admin and requesters
Customizable Reports (expiring certificates, Qualys SSL Labs HealthCheck, …)
2nd factor authentication (Grid Card, Soft-Token (PC/mobile), SMS)
Discovery Tool: discover all your X509 certificates
SSL automation: SSL Turbo or AMCE

16. What’s in the Entrust mPKI
Included in Entrust mPKI
10 pre-validated Organisations
10 pre-validated Domains
2 super-admin
3 add. Organisations = €/$/£99
3 add. Pre-validated domains = €/$/£99
1 add. Super-admin = €/$/£99

17. Pricing

18. Our Approach

19. Our answer

20. Our answer
Discovery Tool (SSL247 or Entrust discovery tool) in order to discover ALL the X.509 certificates
Audit:
Inventory
Analysis
Recommendations
Results:
Simplifying portfolio management
Outsourcing part of the life cycle of X.509 certificates : “Gartner clients continue to cite X.509 certificate expiries as being a leading concern with respect to management of certificates.”
ENTRUST Market Share
Worldwide         7%
Europe             2.16%
France              2.67%
Scandinavia      3%
Italy                  1.15%
Spain                4.69%
South America 2.16%
Germany           0.89%
Netherlands       1.62%
UK/IE                3.36%
Rajouter hyperlinks pour SSL247 et Entrust

21. Symantec (non-premium certs but also premium if you want)
Our answer
Symantec (non-premium certs but also premium if you want)
ENTRUST
Algorithm
no ECC with regular Symantec certs
ECC included with ALL certs
Malware Scanning
Norton Safe site
Site Lock : --> better DataBase
Instant Issuance
NO (except OV)
YES : no more vetting for the next 27 months. OV and EV instantly issued, ONE time vetting for the Domains you provide
Licensing model
one lic./cert
UNLIMITED : no more question about SLA,…etc
Positionning
Premium
Premium (even more)

22. Case Study FNAC

23. FNAC is one the biggest eCommerce website in FR, BE and ES
IT retailers
€7,418M in 2016
Former Symantec mPKI clients
Used to spend +€60K/year
Moved their entire portfolio to Entrust
Around €20K/year (-66%)
Thanks to the move they switched ALL their websites in https
€+5K/year
Total for AOL = €25K/year
E.g.:

24. ENTRUST Recycling vs. Non-Recycling

25. Recycling (or Pooling)
Contact to set: 1, 2, 3 or more years
Ability to recycle any active cert whenever the client wants
What matters is the contract duration NOT the certificate duration
IF 1 year contract, they can order ALL theirs certs on max duration but pay only 1 year, therefore no need to renew/reinstall the cert
Non-Recycling (or non-pooling)
Classic model (you need one certificate on 1 year, here it is)
Units added in the inventory on 1 or 2 years (3 years for OV certs only)
No ability to recycle a certificate

26. Recycling Model (Pooling)OV EV
OV wildCard
Recycling Model (Pooling)
1/1/2020
31/12/2020
1/1/2017
1/1/2018
1/1/2019
1 year contract
1 year price because 1y contract
1 year price because 1y contract
1 year price because 1y contract
50% of 1 year price because 1y contract
2 years contract
Rajouter hyperlinks pour SSL247 et Entrust
2 years price because 2y contract
3 years contract
3 years price because 3y contract
2 years price because contract started 1 year go, therefore only 2 years left on the actual contract

27. Process

28. Process All Pooling/Non-Pooling Entrust accounts include:
Up to 10 x Domains (OV & EV will be enabled by default)
Up to 10 x Organisations
Up to 2 x Super Admin
If the customer needs more domains, organisations and/or super admins, they will be charged (prices below) and you will need to ask your Inside Sales to create the Proposal so that it is added to the Entrust account in Bakewell:
Domains (3 additional) - 99€/£/$
Organisations (3 additional) - 99€/£/$
Super Admin (1 additional) - 99€/£/$
Please remember to ONLY use the Proposal Tool to add stock/inventory to the Entrust Enterprise Account. You can check in the usual ‘Stock’ tab in Bakewell or in the Entrust Enterprise Account (Inventory tab).
What to check  
Does my client have an Entrust Account in Bakewell?
What inventory/stock does my client have in their Bakewell Entrust Account?
Does my client have any new domains that need to be pre-vetted?

29. Process: new Entrust account
New entrust account creation :
Process order Entrust Outlook Template :
Entrust introduction Outlook Template :
New Entrust account form :

30. QUESTIONS