Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-01-05 13:46:47.0

TN 7690 - Are Entrust certificates susceptible to the md5 vulnerability?

Question:
Are Entrust certificates susceptible to the MD5 vulnerability?

Answer:
The MD-5 vulnerability is an issue where a hacker could create a rogue certificate during the certificate creation from a CA that uses MD-5 to sign their certificates. Entrust is NOT affected by this vulnerability.  Entrust signs all certificates using the SHA-1 algorithm, and all of the root certificates in use are created with the more secure SHA-1 algorithm. As a result certificates issued by Entrust are not susceptible to this vulnerability.

Affected Products:

• Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 1 Year Mutual SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 1 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 1 Year WAP Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 2 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 2 Year Mutual SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 2 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 2 Year WAP Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 3 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 3 Year Advantage SSL Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services 3 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services 3 Year WAP Certificate Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services 4 Year Advantage SSL Certifcate Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Accelerator Licenses Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Additional Administrator Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Additional Client Organization and Domain Names Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Additional Domain Names Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Additional Organization Names Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Additional SANs for UCC Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Advantage Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Affiliate Operations Module for SSL Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Affiliate Partner Program Fee Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Affiliate Partner Royalty Fees Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Cert Admin Advantage Server Certificate 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Cert Admin Advantage Server Certificate 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Cert Admin UCC SSL - 1 Year Version Not Applicable English Windows
• Entrust Certificate Services Cert Admin UCC SSL - 2 Year Version Not Applicable English Windows
• Entrust Certificate Services Certificate Administrator 3 Year SSL Certificates Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services Certificate Administrator EV SSL - 1 Year Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services Certificate Administrator EV SSL - 2 Year Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services Certificate Manager 7.0 English Windows
• Entrust Certificate Services Certificate Manager 7.1 English Windows
• Entrust Certificate Services Client Management Module Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services CMS Account 1 YR Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services CMS Account 2 YR Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services CMS Account 3 YR Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services CMS Account Version Not Applicable ALL Platform Not Applicable
• Entrust Certificate Services Cross Certificate Fee - CASP Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Cross Certificate Fee - Enterprise Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services ECS Advantage Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services ECS UC Certificate - 4 Year Version Not Applicable English Windows
• Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services EV Certificate - 1yr Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services EV Certificate - 2yr Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services EV Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services EV SSL - 1 Year Version Not Applicable English Windows
• Entrust Certificate Services EV SSL - 2 Year Version Not Applicable English Windows
• Entrust Certificate Services Extended Validation Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Partner Program Reseller Fees Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificate - 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificate - 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificate - 3 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Standard Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificate - 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificate - 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificate - 3 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UC Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services UCC Certificate - 1 and 2 year Version Not Applicable English Windows
• Entrust Certificate Services UCC SSL - 1 year Version Not Applicable English Windows
• Entrust Certificate Services UCC SSL - 2 year Version Not Applicable English Windows
• Entrust Certificate Services UCC SSL - 3 year Version Not Applicable English Windows
• Entrust Certificate Services Web Hoster Service Account Version Not Applicable English Platform Not Applicable
• Entrust Certificate Services Wildcard Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
• Entrust Certificate Services Wildcard Certificates Version Not Applicable Language Not Applicable Platform Not Applicable