Confirmed users
569
edits
CA/Information Checklist: Difference between revisions
Jump to navigation
Jump to search
→Create a Root Inclusion Case: Changes in progress
(→Create a Root Inclusion Case: Updating CCADB instructions) |
(→Create a Root Inclusion Case: Changes in progress) |
||
| Line 12: | Line 12: | ||
== Create a Root Inclusion Case == | == Create a Root Inclusion Case == | ||
'''UNDER REVISION''' | '''UNDER REVISION''' | ||
If your CA does not yet have access to the CCADB, then you may request access here: | If your CA does not yet have access to the CCADB, then you may request access here: | ||
* https://ccadb.org/cas/request-access | * https://ccadb.org/cas/request-access | ||
| Line 26: | Line 28: | ||
#** There will be a green bar shown across the top of the page, which says “Case ###### was created. Click on the number in the list below (the same which was provided by green bar) to view the new Case. | #** There will be a green bar shown across the top of the page, which says “Case ###### was created. Click on the number in the list below (the same which was provided by green bar) to view the new Case. | ||
#** Otherwise, go back to the 'CASES' tab in 'My CA', and click on the number in the top row of the 'Case' column. | #** Otherwise, go back to the 'CASES' tab in 'My CA', and click on the number in the top row of the 'Case' column. | ||
#Items that need to be completed appear in five tabs in a row near the top - "CA OWNER" "AUDITS" "POLICY DOCUMENTS" "ROOT INFORMATION" and "TEST WEBSITES" | #Items that need to be completed appear in five tabs in a row near the top - "CA OWNER" "AUDITS" "POLICY DOCUMENTS" "ROOT INFORMATION" and "TEST WEBSITES" (if applicable). | ||
'''CA OWNER''' | |||
'''ROOT INFORMATION''' | |||
#Click on the "ROOT INFORMATION" tab, then "Add/Select Root Certificates", and then "Add Root Certificate to the CCADB" | #Click on the "ROOT INFORMATION" tab, then "Add/Select Root Certificates", and then "Add Root Certificate to the CCADB" | ||
#Paste the PEM information for the Root Certificate in the box, click on "Validate PEM". | #Paste the PEM information for the Root Certificate in the box, click on "Validate PEM". | ||
| Line 32: | Line 39: | ||
#Fill in the data for the required fields for the root under the “ROOT INFORMATION” tab. | #Fill in the data for the required fields for the root under the “ROOT INFORMATION” tab. | ||
#Repeat this process for each of the Root Certificates that need to be added. | #Repeat this process for each of the Root Certificates that need to be added. | ||
# | |||
# | # | ||
#* Explain why this root certificate needs to be included in the root store | |||
'''AUDITS''' | '''AUDITS''' | ||
| Line 53: | Line 63: | ||
#Click on the ‘Edit Test Websites’ button (which may be in the button overflow – upside down triangle) to enter the test websites for new root certificates if you are requesting the Websites (TLS/SSL) trust bit. | #Click on the ‘Edit Test Websites’ button (which may be in the button overflow – upside down triangle) to enter the test websites for new root certificates if you are requesting the Websites (TLS/SSL) trust bit. | ||
#* Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation' | #* Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation' | ||
#* Provide evidence of testing and results | #* Provide evidence of testing and results | ||
#When all requested information has been completed, click on the “Submit to Root Store” button | |||
'''ADDITIONAL INSTRUCTIONS''' | |||
#* Add records to the CCADB for all existing intermediate certificates chaining up to this root certificate | #* Add records to the CCADB for all existing intermediate certificates chaining up to this root certificate | ||
#* Update the 'Mozilla Fields' section to indicate which Mozilla Trust Bits are being requested (e.g. Email, Websites), and if EV treatment is being requested. | #* Update the 'Mozilla Fields' section to indicate which Mozilla Trust Bits are being requested (e.g. Email, Websites), and if EV treatment is being requested. | ||