Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

REMOTE DATA ENTRY
Auditable Event CA CSA RA
All security-relevant messages that are received by the
system
DATA EXPORT AND OUTPUT
All successful and unsuccessful requests for confidential and
security-relevant information
KEY GENERATION
Whenever the component generates a key (not mandatory for
single session or one-time use symmetric keys)
PRIVATE KEY LOAD AND STORAGE
X X X
X X X
X X X
The loading of component private keys X X X
All access to certificate subject Private Keys retained within
the CA for key recovery purposes
TRUSTED PUBLIC KEY ENTRY, DELETION AND STORAGE
All changes to the trusted component Public Keys, including
additions and deletions
SECRET KEY STORAGE
X N/A N/A
X X X
The manual entry of secret keys used for authentication X X X
PRIVATE AND SECRET KEY EXPORT
The export of private and secret keys (keys used for a single
session or message are excluded)
CERTIFICATE REGISTRATION
X X X
All certificate requests X N/A X
CERTIFICATE REVOCATION
All certificate revocation requests X N/A X
CERTIFICATE STATUS CHANGE APPROVAL
The approval or rejection of a certificate status change
request
CA CONFIGURATION
Any security-relevant changes to the configuration of the
component
ACCOUNT ADMINISTRATION
X N/A N/A
X X X
Roles and users are added or deleted X - -
The access control privileges of a user account or a role are
modified
CERTIFICATE PROFILE MANAGEMENT
X - -
All changes to the certificate profile X N/A N/A
CERTIFICATE STATUS AUTHORITY MANAGEMENT
All changes to the CSA profile (e.g. OCSP profile) N/A X N/A
50 7/25/2011