Changes

Jump to: navigation, search

CA/Information Checklist

818 bytes removed, 21:50, 17 October 2023
Updating to remove duplication with the ccadb.org website and instructions documents
# Click on the "Submit to Root Store" button.
Note'''Important''':
* Audit statements must meet the requirements listed in [https://www.ccadb.org/policy#51-audit-statement-content section 5.1 of the CCADB Policy] '''and''' [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#3-documentation in section 3 of the Mozilla Root Store Policy].
** Also see Mozilla's [[CA/Audit_Statements#Audit_Lifecycle|audit lifecycle requirements]]
* If you are requesting that the Websites (TLS) trust bit be enabled for your root certificate(s), then be sure to provide the 3 test websites (valid, expired, revoked) in the TEST WEBSITES tab.
** Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation'
* Add records to the CCADB for all existing intermediate certificates chaining up to the new root certificate(s).
** https://www.ccadb.org/cas/intermediates
=== Create a "Root Inclusion Request" Case ===
# Create a [https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341 Root Inclusion Case] in After you have provided information to the CCADB #*Click on the 'My about your CA' tab#*Click on the 'CASES' tab under the CA Owner’s nameorganization and root certificates, near the top left corner of the page#* Click on the 'New' button, which is on the right side of the page, below the 'Get URLs' button#* Select 'you may use a "Root Inclusion Request', and click on 'Next'#* Type " case to request that your root certificate(s) be included in information for the 'SubjectMozilla's root store, e.g. XYZ Root Certificates#* Click on the 'Save' button.#** There will be a green bar shown across the top of the pageupdate trust bit settings, which says “Case ###### was created. Click on the number in the list below (the same which was provided by green bar) to view the new Caseand/or enable EV treatment.# '''Additional instructions for creating Create a root inclusion case are available [https://www.ccadb.org/cas/inclusion here"Root Inclusion Request" Case] and in the CCADB #* Detailed Instructions: [https://docs.google.com/document/d/1FHSbpNJ3CQOcpVqrj66elKQhTmpllp-IBsDovPy6cOo here/edit# Create a Root Inclusion Request]#* Example: https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341* Fill in all of the fields in the MOZILLA tab# Click on the "Submit to Root Store" button.'''
'''ADDITIONAL INSTRUCTIONSImportant''': #* Add records to the CCADB for all existing intermediate certificates chaining up to this root certificate#* Update the 'Mozilla Fields' section to indicate which Mozilla Trust Bits are being requested (e.g. Email, Websites), and if EV treatment is being requested.#* Make sure that Mozilla is listed in In the 'Root Stores Applying To' field. If it is not, then go back to the Case pageMOZILLA tab, click on the 'Add/Update Root Cases' "Print View" button, click on the Mozilla checkbox corresponding to see the root certificate, then click on the 'Apply Changes' buttondata that will be shared publicly about your request.#Fill in the remaining information#*On the 'Mozilla' page, click on the 'Print View' to see where further information is needed.#Click on the '"Get URLs' " button (which may be in the button overflow – upside down triangle) and copy the line that begins with “Mozilla Root Inclusion Case Information:” into a Comment in [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|your Bugzilla Bug]]. The line to copy and paste into the Bugzilla Bug looks like: #**Mozilla Root Inclusion Case Information: https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341 IMPORTANT:* '''Whenever you update data in your Root Inclusion Case in the CCADB, be sure to [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|add a comment to your Bugzilla Bug]] to let folks know to re-check the information.'''* Fields for which a root store operator has set "Data Verified" cannot be edited until you ask the root store operator to change the corresponding status back to "Not Verified".
== CA Primary Point of Contact (POC) ==
Confirm, administrator
5,526
edits

Navigation menu