Problem

Verified Mark Certificates (VMCs) are a critical step in a series of security measures that help strengthen email security, build trust in the inbox, and help users associate a brand logo with the active security check provided by DMARC. Verifying the identity of the requestor of the VMC and registration of the logo decreases the likelihood of VMCs being used to spoof your brand.

The additional validation requirements for VMC may take anywhere from an additional day to more than a week to complete. As a result of the additional validation time, we encourage users to monitor email and voicemail for updates from our validation team.

The validation process for a VMC builds on the steps used for Extended Validations certificates, adding new steps to the validation process as required by the VMC specification section 3.2.

Solution

The VMC validation process will verify the following:

Validating your organization’s SVG Logo

1. Your logo must be properly formatted and match your registered trademark (design mark).
2. For more on preparing your logo see this post “Getting Ready for BIMI: Prep Your Logo.”
3. This step goes rather quickly when prepared in advance.

Verifying the Trademark

1. You will be asked to provide us with the Registered Mark's trademark registration number and the name of the Trademark Office that granted the trademark registration.
2. For information on currently approved Trademark offices see “Qualifying for a VMC – How to Trademark Your Logo.”
3. If your mark is already registered, this step will go quickly. If your mark is not trademarked you’ll want to do that before applying for a VMC.

Verifying the identity of the individual submitting the request

1. Additional remote video and in-person validation are required as part of the specification. The use of multiple steps will reduce the possibility that an unauthorized individual will get a VMC for your domain.
2. A remote video session is where the applicant shares approved government-issued photo documentation with a DigiCert validation agent.
3. Another step involves the applicant meeting with a Notary, Lawyer, or Solicitor and completing a VMC Declaration. As notary processes vary by location, the specification requires an in-person meeting with a notary to complete this step. This requirement may evolve in the future.
4. The notary is selected by DigiCert, and the timing can be very fast in locations where mobile notaries are readily available. In other locations this may require an appointment increasing the time you need to allocate to the process.