Protect Private Key. Customer is responsible for protecting its Private Key. Customer represents, warrants and agrees that, in regard to the TrustID Secure Email Certificate, Customer: (i) has kept and will keep its Private Key (and any Activation Data used to protect Customer's Private Key) private, and (ii) will take all reasonable security measures to prevent unauthorized access to, or disclosure, loss, modification, compromise, or use of, its Private Key and the computer system or media on which its Private Key is stored. Failure to protect the Private Key or to notify IdenTrust of the theft, compromise, or misuse of the Private Key may cause Customer serious adverse legal and financial consequences.
Protect Private Key. Subscriber is responsible for protecting its Private Key(s). Subscriber represents, warrants and agrees that, in regard to each EV Code Signing Certificate, Subscriber: (i) has kept and will keep its corresponding Private Key (and any associated Activation Data) private, and (ii) will take reasonable security measures to prevent unauthorized access to, or disclosure, loss, modification, compromise, or use of, its corresponding Private Key (and associated Activation Data), as well as any computer system, device, or media on which its corresponding Private Key (or associated Activation Data) is stored. Subscriber may change its employee(s) or agent(s) who are authorized to use and administer on behalf of Subscriber EV Code Signing Certificates, without requesting revocation of current EV Code Signing Certificates, but Subscriber shall bear the security and control risks associated with making such changes without revoking any EV Code Signing Certificates. In the alternative, Subscriber may request revocation of current EV Code Signing Certificates and apply for new EV Code Signing Certificates, subject to the fees and other requirements associated with the issuance of new EV Code Signing Certificates. Subscriber agrees that the act or omission of any employee or agent of Subscriber who has access to use any given EV Code Signing Certificate or the corresponding Private Key, in using or administering the EV Code Signing Certificate or such Private Key, will be deemed for all purposes to be the act or omission of Subscriber. Failure to protect the Private Key or to notify IdenTrust of the theft, compromise, or misuse of the Private Key may cause Subscriber serious adverse legal and financial consequences.
Protect Private Key. Subscriber is responsible for protecting its Private Key(s). Subscriber represents, warrants and agrees that, in regard to each EV Code Signing Certificate, Subscriber: (i) has kept and will keep its corresponding Private Key (and any associated Activation Data) private, (ii) will take reasonable security measures to prevent unauthorized access to, or disclosure, loss, modification, compromise, or use of, its corresponding Private Key (and associated Activation Data), as well as any computer system, device, or media on which its corresponding Private Key (or associated Activation Data) is stored, (iii) Subscriber has generated, maintained storage of, and used its private key in either IdenTrust provided key storage mechanism related to the EV Code Signing Certificate or in Subscriber acquired crypto module that meets or exceeds the requirements of FIPS 140-2 level 2, and (iv) Subscriber will confirm the operating environment achieves a level of security at least equivalent to that of FIPS 140-2 level 2 or Common Criteria EAL 4+ and communicate audit compliance via a completed TrustID EV Code Signing HSM IT Audit Form included in the Appendix A of this Subscriber Agreement and also posted for reference on the IdenTrust TrustID Repository. Subscriber may change its employee(s) or agent(s) who are authorized to use and administer on behalf of Subscriber EV Code Signing Certificates, without requesting revocation of current EV Code Signing Certificates, but Subscriber shall bear the security and control risks associated with making such changes without revoking any EV Code Signing Certificates. In the alternative, Subscriber may request revocation of current EV Code Signing Certificates and apply for new EV Code Signing Certificates, subject to the fees and other requirements associated with the issuance of new EV Code Signing Certificates. Subscriber agrees that the act or omission of any employee or agent of Subscriber who has access to use any given EV Code Signing Certificate or the corresponding Private Key, in using or administering the EV Code Signing Certificate or such Private Key, will be deemed for all purposes to be the act or omission of Subscriber. Failure to protect the Private Key or to notify IdenTrust of the theft, compromise, or misuse of the Private Key may cause Subscriber serious adverse legal and financial consequences.
