External Certificate Authority

US Government External Certificate Authority (ECA)

Alert: The ORC ECA has migrated to 2048 bit certificates.
The change from 1024 to 2048 bit certificates should have little impact on the process. It will take a little longer for the certificate key pairs to generate on your computer and certificate export files will be twice the size of previous files (about 4k).

ORC has been approved to issue certificates to all Foreign Nationals except where prescribed by law.

All applicants (including US Citizens) are now required to show proof of citizenship.

For citizens of the United States, Great Britain, Canada, Australia and New Zealand, click the arrow to the right.
For citizens of all other countries, click the arrow to the right.

As a U.S. Government ECA, Operational Research Consultants (ORC) is authorized to provide digital certificates for:

Identification/Digital Signature

Encryption to secure email and digital files

Server Authentication for identification of web sites and other devices

Domain Controllers for securing your Windows domain and

Signing of Code

The ORC ECA supports the medium assurance and medium-hardware assurance levels, as defined in the U.S. Government ECA Certificate Policy. ORC ECA offers 1, 2, or 3-year Certificates, encryption key archival and recovery, Microsoft Smart Card logon, and Microsoft Domain Controller certificates.

ORC ECA Subscribers may include DoD contractors, vendors, allied partners, North Atlantic Treaty Organization (NATO) allies, Foreign Nationals, members of other Government agencies and their trading partners.

Why do I need an ECA Certificate?
Why should I buy from ORC ECA?
Access information on the DoD ECA Program.

Contact Us

Our Help Desk is online 24 x 7 or you can speak to an ORC Service Representative from 7:30 am to 7:30 pm (Eastern Time).

Call 1-800-816-5548, email ecahelp@orc.com, or click on the On-line Help Desk

WARNING! THIS COMPUTER SYSTEM IS OPERATED FOR THE UNITED STATES GOVERNMENT. UNAUTHORIZED ACCESS OR USE WHICH EXCEEDS AUTHORIZED ACCESS IS PUNISHABLE UNDER 18 U.S.C. 1030 AND OTHER SECTIONS OF THE UNITED STATES CODE. THIS COMPUTER SYSTEM, INCLUDING ALL RELATED EQUIPMENT, NETWORKS AND NETWORK DEVICES - SPECIFICALLY INCLUDING INTERNET ACCESS - ARE PROVIDED ONLY FOR AUTHORIZED U.S. GOVERNMENT USE. THESE COMPUTER SYSTEMS MAY BE MONITORED FOR ALL LAWFUL PURPOSES, INCLUDING TO ENSURE THAT THEIR USE IS AUTHORIZED, FOR MANAGEMENT OF THE SYSTEM, TO FACILITATE PROTECTION AGAINST UNAUTHORIZED ACCESS, AND TO VERIFY SECURITY PROCEDURES, SURVIVABILITY AND OPERATIONAL SECURITY. THIS MONITORING TO INCLUDE ACTIVE ATTACKS BY AUTHORIZED U.S. GOVERNMENT ENTITIES TO TEST OR VERIFY THE SECURITY OF THIS SYSTEM. DURING MONITORING, INFORMATION MAY BE EXAMINED, RECORDED, COPIED AND USED FOR AUTHORIZED PURPOSES. ALL INFORMATION, INCLUDING PERSONAL INFORMATION, PLACED ON OR SENT OVER THIS SYSTEM MAY BE MONITORED. USE OF THIS U.S. GOVERNMENT COMPUTER SYSTEM, AUTHORIZED OR UNAUTHORIZED, CONSTITUTES CONSENT TO MONITORING OF THIS SYSTEM. UNAUTHORIZED USE MAY SUBJECT YOU TO CRIMINAL PROSECUTION. EVIDENCE OF UNAUTHORIZED USE COLLECTED DURING MONITORING MAY BE USED FOR ADMINISTRATION, CRIMINAL OR ADVERSE ACTION. USE OF THIS SYSTEM CONSTITUTES CONSENT TO MONITORING FOR THESE PURPOSES.