Page 1 of 4 123 ... LastLast
Results 1 to 10 of 33

Thread: Slaying the Comodo Dragon

  1. #1

    Default Slaying the Comodo Dragon

    Friedrich



    As I am trying to get everything together for a product release I broke down
    and purchased a security certificate from Comodo. This is without question
    one of the most frustrating experiences I have had in some time. The
    problem is that before or during the purchase process they do not tell you
    what the rules are before you start or the things you have to know before
    you get there. After a dozen or more emails to tech support, eight tech
    support representatives and over four hours on the phone and having them
    reissue the certificate four times, we finally got it working.



    There are several absolutes they don't tell you about. I will go over some
    of these to help you prevent the problems I went through.



    When you go through your application process it asks for company name,
    organization or personal name. After the purchase is made (and you can't go
    back and change your mind.) it then tells you that you have to provide
    corporate documents such as the articles of incorporation, Business
    licenses, Tax statements and the like. You have to send more than one form
    of business identification to have the process completed and have the
    certificate issued. If however you selected to purchase as an individual
    you only have to send them a drivers license or a passport to prove who you
    are. As I am trying to get this project off the ground I gave them the name
    we will be marketing under which at the moment has no paperwork to show its
    existence. So I was stuck. After more calls and emails they agreed to
    reissue under my name and we were off and running again, or so I think.



    I download the certificate and it installs. I then fire off Setup Builder
    and go to put in the information... Hmmm Setup Builder is asking for files
    and keys I don't have, all I have is the certification file. Back to
    Comodo. Tech support tells me I screwed up and did not put in the location
    or name for the files. I tell them it never asked. They tell me I am wrong
    and ask what browser I am using. I tell them Firefox and they say oh, that's
    it, we don't support Firefox, to which I ask why did you not have that on
    your web site before I did that. Another reissue using IE 7, with the guy
    on the phone we get to the screen and once again there is no place to enter
    a file name or path. He tells me I can't be right so I read him the screen.
    He asks what OS I am using and I tell him Vista. Ahhh, that's it, we don't
    support Vista to download the certificates... (So I ask myself, Self, why am
    I buying this thing other than Vista?) Anyways, they inform me that I can't
    use Vista to download it, so we start all over again using an XP computer
    with IE and sure enough the field is there that I need. I download it and
    they can't tell me if I can, or how to export it to the computer I do my
    development on. I get it , export it, move it to the development computer
    and import it. It finally worked and I have the files I need. Only took 3
    days and a bunch of time.



    Bottom Line is..

    1.. Make sure you have bunches of documentation you can fax to them about
    your business or select purchasing a certificate as an individual.
    2.. Don't try to download the certificate on anything other than IE and
    only on the computer that you used to make the purchase. Comodo does not
    support Firefox or any other browser.
    3.. Don't try to download it on to a Vista computer because Comodo does
    not support Vista downloads for the certificates you are purchasing for use
    on Vista.
    This could have been made a bunch easier if they published on there web site
    up front what you needed to purchase and download the certificates before
    you started. I particularly liked the tech support rep that asked me to
    hang up and put in another support ticket on the web site because he did not
    have a clue and maybe someone who had the solution could answer the ticket.



    Once installed it works great but that is only because Setup Builder takes
    all the work out of doing the updates and managing the certificate stuff.



    What a weekend.

    Bob Healy

  2. #2

    Default Re: Slaying the Comodo Dragon

    Bob,

    I fear it was one of these days we don't like so much <g>.

    Unfortunately, this is with all WebTrust Compliant Certification
    Authorities, not just with Comodo. They all follow the *same* rules.

    And of course:
    http://www.lindersoft.com/forums/showthread.php?t=2232

    Comodo is the 2nd largest WebTrust Compliant Certification Authority and
    their support is usually excellent. We have to renew our own certificate in
    September and I'll let you know how it went.

    Friedrich

  3. #3

    Default Re: Slaying the Comodo Dragon

    >Comodo is the 2nd largest WebTrust Compliant Certification Authority and
    >their support is usually excellent. We have to renew our own certificate in
    >September and I'll let you know how it went.
    >
    >Friedrich

    That will be interesting.

    SFAIK Comodo don't to renew certificates so when a certificate times
    out you need to start again with a new one. I hope I'm wrong.

    Steve

    --
    Steve Wolstenholme Neural Planner Software Ltd

    EasyNN-plus. The easy way to build neural networks.

    http://www.easynn.com

  4. #4

    Default Re: Slaying the Comodo Dragon

    Steve;

    > That will be interesting.
    >
    > SFAIK Comodo don't to renew certificates so when a certificate times
    > out you need to start again with a new one. I hope I'm wrong.

    We purchased our Comodo certificate in September 2003, renewed in September
    2004 for one year and then in September 2005 for two years. Now we'll renew
    for 3-years so it will be valid until September 2010. Should not cause any
    problems

    Friedrich

    --
    Friedrich Linder
    Lindersoft
    www.lindersoft.com
    +1.954.252.3910

    "point. click. ship" - that's SetupBuilder 6.5
    Create Windows Vista ready installations in minutes

    -- Official Comodo Code Signing and SSL Certificate Partner

  5. #5

    Default Re: Slaying the Comodo Dragon

    I started with a two year certificate and it still has over a year to
    run. I'm interested if renewal is just a case of sending Comodo more
    money or will I need to jump through all the hoops again?

    Can we renew using your service at the low price or do renewals have
    to go to directly to Comodo?

    Steve


    --
    Steve Wolstenholme Neural Planner Software Ltd

    EasyNN-plus. The easy way to build neural networks.

    http://www.easynn.com

  6. #6

    Default Re: Slaying the Comodo Dragon

    Hi Steve,

    > I started with a two year certificate and it still has over a year to
    > run. I'm interested if renewal is just a case of sending Comodo more
    > money or will I need to jump through all the hoops again?

    In the past, it was only a process of sending more money (no new identity
    verification).

    But I noticed that Thawte already changed from an automated to a
    re-authentification based process. I don't know if all WebTrust agencies
    have to do that now.

    Last Friday a customer told me that the renewal process took only 30 minutes
    so I think Comodo does not do re-authentification (yet).

    > Can we renew using your service at the low price or do renewals have
    > to go to directly to Comodo?

    If you previously ordered Comodo Code Signing Digital IDs direct from
    Comodo, it is advised that you create a new username and password when
    ordering via our Lindersoft site. Unfortunately, there is no other solution
    possible. We have to do the same when our certificate expires in September.
    Using the existing Comodo login details will result in Retail SRP being
    charged (e.g. $500 for 3-years instead of $200).

    If you previously ordered directly from Comodo, but redirected from our
    Lindersoft page, then you only have to enter your existing Comodo/Lindersoft
    login details to renew at the discounted price.

    http://www.lindersoft.com/forums/showthread.php?t=2494

    Friedrich

    --
    Friedrich Linder
    Lindersoft
    www.lindersoft.com
    +1.954.252.3910

    "point. click. ship" - that's SetupBuilder 6.5
    Create Windows Vista ready installations in minutes

    -- Official Comodo Code Signing and SSL Certificate Partner

  7. #7

    Default Re: Slaying the Comodo Dragon

    Hi Friedrich,

    >I fear it was one of these days we don't like so much <g>.
    >
    >Unfortunately, this is with all WebTrust Compliant Certification
    >Authorities, not just with Comodo. They all follow the *same* rules.

    I have to admit that the Comodo experience was one of the most
    frustating online experiences I have had in a very long time<g>

    The information on their pages about what's needed, where and when, is
    horrible to say the least. For example there is no information about
    the private key. I have been through this before but had completely
    forgot about that. It took several days to get that strightened out.
    At points in the process their active-x or whatever it is completely
    takes over the damn browser so you can't even close it. On two
    ocations I had to kill it from the task managere as I could not get
    anywhere and the process was frozen solid.

    In order to send them the corporate information you must use the fax
    cover page that they send. I didn't notice the silly attachment and
    it took a day for me to get information from them what was missing
    because they kept telling us that they hadn't received the fax, which
    they had, just not with the correct cover page.

    Because of the private key they had to re-issue the certificate and I
    had to go back through the purchase process until I got to paying and
    then I had to cancel and send them the order number so they could
    cancel it. So I finally got all my files and everything is set up but
    it was not a pleasant experience.

    It's not that there is something bad about how it's set up in
    particular, but the instructions on what to do, where and when are
    just not there. They could definitely improve their website to be
    more interactive and have better error checking.

    Best regards,

    Arn&#243;r Baldvinsson
    Icetips Creative, Inc.
    San Antonio, Texas, USA
    www.icetips.com


    Subscribe to information from Icetips.com:
    http://www.icetips.com/subscribe.php

  8. #8

    Default Re: Slaying the Comodo Dragon

    My point exactly. If they had had instructions, or a check list of what you
    needed, or a step by step description of what the process required it would
    have made my life a bunch easier. Every time I had a problem I had to go
    through the same process up to the point of purchase, stop, call them, give
    them the new order number and get a re-issue of the certificate. Lynn
    Howard e-mailed me and said you also need a static IP through the process.
    I did not have a problem with that. While I don't have a static IP, I guess
    it was static enough to complete the process. Not sure what will happen
    when my IP address changes like it does every few days. I wonder if part of
    the validation on certificate updates is to test IP. If so, I am screwed, I
    can't get a static IP where I live unless I want to go commercial DSL and
    pay a ton to get it. My last email from them told me I could not do that
    and I would have to go back to LinderSoft for the re-issue. Little does he
    know that it was allready re-issued. Wonder what will happen now.

    Bob Healy

  9. #9

    Default Re: Slaying the Comodo Dragon

    >It's not that there is something bad about how it's set up in
    >particular, but the instructions on what to do, where and when are
    >just not there. They could definitely improve their website to be
    >more interactive and have better error checking.

    I bought my certificate from Mitchell Vincent because he was the
    cheapest source at the time.

    Mitchell gave all the necessary instructions until he sent
    my order to Comodo. They took over with a series of hoops to
    jump through but they told me exactly how to jump.

    I got the collection code once Comodo were happy with my details.

    With the code it was fairly easy to get the files I needed for
    signing my exe's (or any other file). It was done from the
    command line but I now let SetupBuilder do it while compiling my setup
    file. I only need to sign my setup and uninstaller file.

    Steve

    --
    Steve Wolstenholme Neural Planner Software Ltd

    EasyNN-plus. The easy way to build neural networks.

    http://www.easynn.com

  10. #10

    Default Re: Slaying the Comodo Dragon

    My clarionmag articles last fall walked through the process: saving the
    private key file, requesting 2048-bit private key, FAXing a copy of my
    city-issued business license, saving certificate and private key as files
    (that you can transfer to any computer) rather than in the CSP, not
    abbreviating the state name, etc.

    Other than using the Lindersoft signup, have things changed significantly
    enough to have outdated those articles?

    Jane

    http://www.clarionmag.com/cmag/v8/v8n10signing1.html
    http://www.clarionmag.com/cmag/v8/v8n11signing2.html

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •