Participant Technical Reference Manual - IESO

More documents

Recommendations

Info

2. Participant Workstation, Network & Security IMO_MAN_0024 Certification Authority‟s web based “Entrust Authority Administration” tool which must be used for creating or recovering digital certificate EPF files used with the IESO Portal. 2.3.6 Requirements for Browser and Digital Certificate Software Compatibility Workstation Platform for MPI Browser Client 170 The browser clients recommended by the IESO for the MPI are Internet Explorer 6.0 SP2, and Internet Explorer 7.0 on Windows XP-SP2 and Internet Explorer 7.0 on Vista. Workstation Platform for Portal Browser Client 171 The browser client recommended by the IESO portal vendor (BEA) and supported by the IESO is as shown on the “IESO Supported Client Platform” web page. Recommended by the Portal vendor but not supported by the IESO is: : Internet Access Netscape 7.1, or 7.2, or Mozilla Firefox 1.0, 1.5 or 2.0.1 Safari 2.0 Any of these will work. The “IESO Supported Client Platform” web page shows the recommended OS/Browser /JRE combination for the Portal‟s “Entrust TruePass” component. Not supported but compatible are: Netscape Navigator 7.0 in combination with the Sun JVM 1.4.2 Mozilla FireFox 1.0 in combination with Sun JVM 1.4.2 172 Internet access is required for all market participants even those using the Private or Shared Network as described earlier in this document. For basic functionality and full utilization of the key management functionality of the Entrust PKI products, communication between the client (CLS, MIM MPI Applet, or MIM programmatic API Application) and the CA is necessary. The CLS, MIM MPI Applet and MIM programmatic API Application use calls to the CA Server and LDAP Servers that allow access to the MOSMIM Web Server and/or allow for digital signing of bids and offers. Certification Authority IP Addresses and Domain Names 173 The Certification Authority system IP Addresses applicable are as follows: MPI/MIM Sandbox / Production Environments Prior to June May 13, 201009 Verizon Datacenter MoveIssuing CA Expiry Cybertrust Production System CA Manager - version 7.2 Primary IP Address = 195.217.198.65 TCP ports 829 Failover IP Address = 64.18.29.140 TCP ports 829 Primary IP Address = 64.18.21.69 port 829 50 Public Issue 21.1 – March 15, 2010 - estimated
Participant Technical Reference Manual 2. Participant Workstation, Network & Security Failover IP Address = 64.18.29.140 port 829 Domain name = ccica1.idm.cybertrust.com Cybertrust Production System Directory Server - version 7.2 Primary IP Address = 195.217.199.14 TCP ports 389 Failover IP Address = 64.18.29.142 TCP ports 389 Primary IP Address = 64.18.22.34 port 389 Failover IP Address = 64.18.29.142 port 389 Domain name = ccipdir.idm.cybertrust.com Production Root Certification Authority CRL Locations - version 7.2 Globalsign Root Certificate CRL site URL : http://64.18.25.38/ port 80 Domain name equivalent : http://crl.globalsign.net/ port 80 The CRLs root.crl (http://64.18.25.38/root.crl and http://64.18.25.38/root_cat.crl at this location needs to be available to MPI and MIM IDK workstations through the firewall. MPI /MIM Production Environment After June 2009 For Replacement Verizon Datacenter MoveCA Servers – Starting early March 2010 Cybertrust Production System CA Manager - version 7.2 Primary IP Address = 195.217.198.67 195.217.198.65 TCP ports 829 Failover IP Address = 64.18.29.140 TCP ports 829 Domain name = ccica21.idm.cybertrust.com (no change) Cybertrust Production System Directory Server - version 7.2 Primary IP Address = 195.217.199.26 195.217.199.14 TCP ports 389 Failover IP Address = 64.18.29.142 TCP ports 389 Domain name = ccipdir2.idm.cybertrust.com (no change) Production Root Certification Authority CRL Locations - version 7.2 Globalsign Omniroot Root Certificate CRL site URL : http:// 64.18.30.7/ 64.18.25.38/ port 80 (no change) and http:// http:// 64.18.30.8/ port 80 Domain name equivalent : http:// www.public-trust.com crl.globalsign.net/ port 80 (no change) The CRLs - http://cdp1.public-trust.com/cgi-bin/CRL/202501/cdp.crl root.crl (http://64.18.25.38/root.crl and http://64.18.25.38/root_cat.crl at this location needs to be available to MPI and MIM IDK workstations through the firewall. Portal Sandbox/ Production Environments Prior to May 13, 2010 Verizon Issuing CA Expiry Cybertrust Production System CA Manager Domain - version 7.2 Domain name = ccip.idm.cybertrust.com Issue 21.1 – March 15, 2010 - estimated Public 51
Page 1 and 2:
MANUAL PUBLIC IMO_MAN_0024 Market M
Page 3 and 4:
Participant Technical Reference Man
Page 5 and 6:
Participant Technical Reference Man
Page 7 and 8: Participant Technical Reference Man
Page 57: Participant Technical Reference Man
Page 99 and 100: Appendix B: List of Commonly Used A
show all

Participant Technical Reference Manual - IESO

Create successful ePaper yourself

Delete template?

Save as template?