Confirm
344
edits
Changes
→Create a Root Inclusion Case: Changes in progress
== Create a Root Inclusion Case ==
'''UNDER REVISION'''
If your CA does not yet have access to the CCADB, then you may request access here:
* https://ccadb.org/cas/request-access
#** There will be a green bar shown across the top of the page, which says “Case ###### was created. Click on the number in the list below (the same which was provided by green bar) to view the new Case.
#** Otherwise, go back to the 'CASES' tab in 'My CA', and click on the number in the top row of the 'Case' column.
#Items that need to be completed appear in five tabs in a row near the top - "CA OWNER" "AUDITS" "POLICY DOCUMENTS" "ROOT INFORMATION" and "TEST WEBSITES". ("CASE PROGRESS" shows the status of each of the five tabsif applicable).) '''CA OWNER''' '''ROOT INFORMATION'''
#Click on the "ROOT INFORMATION" tab, then "Add/Select Root Certificates", and then "Add Root Certificate to the CCADB"
#Paste the PEM information for the Root Certificate in the box, click on "Validate PEM".
#Fill in the data for the required fields for the root under the “ROOT INFORMATION” tab.
#Repeat this process for each of the Root Certificates that need to be added.
#Complete information required under the other tabs: "CA OWNER" "AUDITS" "POLICY DOCUMENTS", and if applicable, "TEST WEBSITES".#When all requested information has been completed, click on * Explain why this root certificate needs to be included in the “Submit to Root Store” buttonroot store
'''AUDITS'''
#Click on the ‘Edit Test Websites’ button (which may be in the button overflow – upside down triangle) to enter the test websites for new root certificates if you are requesting the Websites (TLS/SSL) trust bit.
#* Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation'
#* Provide evidence of testing and results
#When all requested information has been completed, click on the “Submit to Root Store” button
'''ADDITIONAL INSTRUCTIONS'''
#* Add records to the CCADB for all existing intermediate certificates chaining up to this root certificate
#* Update the 'Mozilla Fields' section to indicate which Mozilla Trust Bits are being requested (e.g. Email, Websites), and if EV treatment is being requested.
