Changes

Jump to: navigation, search

CA/Certificate Change Process

281 bytes added, 23:09, 14 May 2018
Fixed links
== Enable EV ==
The following steps outline the procedure for a CA to request that Extended Validation (EV) treatment be enabled for a root certificate that is currently included in [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSSNSS].
# Do some initial preparations before you formally submit a request:
#* Update the CP/CPS to reflect the EV policies, and make sure that the additions to the CP/CPS follow the [httphttps://www.mozilla.org/projectsen-US/about/governance/policies/security-group/certs/policy/ Mozilla CA Certificate 's Root Store Policy] as well as the [httphttps://www.cabforum.org/Guidelines_v1_2.pdf extended-validation/ CA/Browser Forum's EV SSL Certificate Guidelines Version 1.2] that are posted on the CA/Browser Forum website.#* See the Review [[CA:Recommended_Practices/Required_or_Recommended_Practices|Recommended Required Practices]] and [[CA:Problematic_Practices/Forbidden_or_Problematic_Practices|Potentially Problematic Forbidden Practices]].#* Complete a WebTrust EV audit that meets the requirements stated in the [httphttps://www.mozilla.org/projectsen-US/about/governance/policies/security-group/certs/policy/ #audits Mozilla CA Certificate 's Root Store Policy].]# Once you are ready, formally submit your request using the Mozilla project's [http://bugzilla.mozilla.org/ Bugzilla issue tracking system:]#* Click on the "Create a new bug report" link in [[CA:How_to_apply/Application_Instructions#Creation_and_submission_of_the_root_CA_certificate_inclusion_requestCreate_Root_Inclusion.2FUpdate_Request|CA:How_to_applyApplication Instructions]].
#* Set the bug summary to "Enable EV for <name of your root>".
#* In the bug description, include a reference to the original root-inclusion bug number.
#* In the bug description, include links to the updated CP/CPS and the WebTrust EV auditstatement.#* Run the [[PSM:EV_Testing_Easy_Version#EV-Readiness_Check|EV-Readiness Check]].# The request will go through the [[ CA:How_to_apply/Application_Verification#Information_gathering_and_verificationInformation_Verification|Information Gathering and Verification]], [[CA:How_to_apply/Application_Verification#Detailed_Review|Detailed Review]], [[CA/Application_Verification#Public_discussion|Public Discussion]], and [[CA:How_to_apply/Application_Verification#InclusionNSS_and_PSM_Bug_Creation|Inclusion]] phases as described in [[CA:How_to_apply/Application_Process#Process_Overview|CA:How_to_applyApplication Process Overview]].
== Disable a Root ==
Confirm, administrator
5,526
edits

Navigation menu