Confirm
344
edits
Changes
→Create a Root Inclusion Case: Updating CCADB instructions
== Create a Root Inclusion Case ==
'''UNDER REVISION'''
If your CA does not yet have access to the CCADB, then you may request access here:
* https://ccadb.org/cas/request-access
#*Click on the 'My CA' tab
#*Click on the 'CASES' tab under the CA Owner’s name, near the top left corner of the page
#* Click on the 'NEWNew' button, which is on the right side of the page, below the 'GET Get URLs' button#* Select 'CA Add/Update Root Inclusion Request', and click on 'Next'#* Type in information for the 'Subject', e.g. Example CA New Root Certificates
#* Click on the 'Save' button.
#** There will be a green bar shown across the top of the page, which says “Case ###### was created. Click on the number in that the list below (the same which was provided by green bar ) to view the new Case.#** Otherwise , go back to the 'CASES' tab in 'My CA', and click on the number in the top row of the 'Case' column.#The Instructions section Items that need to be completed appear in five tabs in a row near the top - "CA OWNER" "AUDITS" "POLICY DOCUMENTS" "ROOT INFORMATION" and Case Progress bar towards "TEST WEBSITES". ("CASE PROGRESS" shows the top status of each of the page will indicate what you need to dofive tabs.)#Click on the 'Copy Audit Info' button (which may be in the button overflow – upside down triangle)"ROOT INFORMATION" tab, then "Add/Select Root Certificates", and then "Add Root Certificate to copy data from a root certificate already the CCADB"#Paste the PEM information for the Root Certificate in the CCADB (if applicable)box, click on "Validate PEM".#* Otherwise If validation is successful, click on the 'Edit' “Create Root Certificate in CCADB” button, enter .#Fill in the data for the required fields for the root under the [https://www“ROOT INFORMATION” tab.ccadb#Repeat this process for each of the Root Certificates that need to be added.org/cas/fields Auditor #Complete information required under the other tabs: "CA OWNER" "AUDITS" "POLICY DOCUMENTS", and Audit statement if applicable, "TEST WEBSITES".#When all requested information]has been completed, then click on the “Submit to Root Store” button '''AUDITS''Save' button.
#* Audit statements must meet the requirements listed in [https://www.ccadb.org/policy#51-audit-statement-content section 5.1 of the Common CCADB Policy]
#* CCADB automatically converts WebTrust Seal URLs into PDF URLs when you click on ‘Save’
#* Note Mozilla's [[CA/Audit_Statements#Audit_Lifecycle|audit lifecycle requirements]]#Click Be sure to select "Applicable Root Certificates" and click on the 'Add/Update Root Cases' button inverted triangle ("Edit") to add each [https://wwwselect root certificates covered by the audit.ccadb.org/cas/fields#pem-data PEM] for each new root certificate or to indicate Indicate which existing root certificates are part of this root inclusion or update request.
#*For each root certificate to be considered in your request, check the appropriate boxes in the "Root Stores Applying To" column
#*For each root certificate to be considered in your request, check the boxes corresponding to the audit statements that apply.
#*Then click on the 'Apply Changes' button. This will create corresponding Root Cases.
'''POLICY DOCUMENTS'''
# Click on the 'Update Policy Documents' button to provide current CP/CPS information.
#* Click on the 'Help' button in the 'Add Policy Documents' page for instructions
#* Update existing policy document information, or add new policy documents via the 'Add Policy Document' button
#* Click on the checkmark to save each set of changes before clicking on the ‘Go Back’ button to return to the Case
'''TEST WEBSITES'''
#Click on the ‘Edit Test Websites’ button (which may be in the button overflow – upside down triangle) to enter the test websites for new root certificates if you are requesting the Websites (TLS/SSL) trust bit.
#* Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation'
