Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

More documents

Recommendations

Info

� The Subscriber will protect its private keys at all times, in accordance with this policy, as stipulated in their certificate acceptance agreements, and local procedures; and � The Subscriber will abide by all the terms, conditions, and restrictions levied on the use of their private keys and certificates. PKI Sponsors (as described in Section 5.2.1.4) assume the obligations of Subscribers for the certificates associated with their devices. 9.6.3 Relying Party Parties who rely upon the certificates issued under a policy defined in this document shall: � Use the certificate for the purpose for which it was issued, as indicated in the certificate information (e.g., the key usage extension); � Check each certificate for validity, using procedures described in the X.509 standard [ISO 9594-8], prior to reliance; � Establish trust in the CA who issued a certificate by verifying the certificate path in accordance with the guidelines set by the X.509 Version 3 Amendment; � Preserve original signed data, the applications necessary to read and process that data, and the cryptographic applications needed to verify the digital signatures on that data for as long as it may be necessary to verify the signature on that data. Note: data format changes associated with application upgrades will often invalidate digital signatures and shall be avoided. 9.6.4 Registration Authority A Raytheon Registration Authority (RA) who performs registration functions as described in one or more of the policies in this CP shall comply with the stipulations of this CP and comply with the respective CPS approved by the RPMA for use with this CP. An RA who is found to have acted in a manner inconsistent with these obligations is subject to revocation of RA responsibilities. RAs shall protect Subscriber personally identifiable information in accordance with the Raytheon Privacy Policy. 9.6.5 Representations and Warranties of Other Participants Repositories that support a Raytheon CA in posting information as required by one or more of the policies in this CP shall: � Maintain availability of the information as required by the certificate information posting and retrieval stipulations of one or more of the policies in this CP; � Provide access control mechanisms sufficient to protect repository information as described in Section 2.4. A CSA that has been issued a Raytheon PKI Certificate shall conform to the stipulations of this document including operating under a CPS that has been approved by the RPMA. Such CSAs who are found to have acted in a manner inconsistent with these obligations are subject to action as described in Section 8.5. All CSAs that provide Raytheon relying parties with revocation status for certificates that assert a policy defined in this document shall conform to the following: � Provide to the RPMA a CPS, as well as any subsequent changes; � Conform to the stipulations of the submitted CPS; 78 7/25/2011
� Ensure that certificate and revocation information is accepted only from valid Raytheon approved CAs; and � Maintain evidence that due diligence was exercised in validating the certificate status. 9.7 Disclaimers of Warranties To the extent permitted by applicable law, Policy Mapping Agreements, Cross Certificates Agreements, and any other related agreements may contain disclaimers of all warranties, other than any express warranties contained in such agreements or set forth in this CP, whether express, implied or statutory, including without limitation, any warranties of merchantability, fitness for a particular purpose or non-infringement of third party rights. TO THE EXTENT PERMITTED BY APPLICABLE LAW, RAYTHEON CAS MAY DISCLAIM ANY EXPRESS OR IMPLIED WARRANTIES, OTHER THAN THOSE EXPRESS WARRANTIES CONTAINED IN THIS CP. EXCEPT FOR THE EXPLICIT REPRESENTATIONS, WARRANTIES, AND CONDITIONS PROVIDED IN THIS CP OR THOSE BETWEEN RAYTHEON AND ITS CUSTOMERS UNDER SEPARATE AGREEMENTS, (A) CERTIFICATES ISSUED BY RAYTHEON ARE PROVIDED "AS IS", AND RAYTHEON, ITS EMPLOYEES, OFFICERS, AGENTS, REPRESENTATIVES, AND DIRECTORS DISCLAIM ALL OTHER WARRANTIES, CONDITIONS AND OBLIGATIONS OF EVERY TYPE (INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, NON- INFRINGEMENT, TITLE, SECURITY, SATISFACTORY QUALITY, OR FITNESS FOR A PARTICULAR PURPOSE, OR ACCURACY AND COMPLETENESS OF INFORMATION PROVIDED), AND FURTHER DISCLAIM ANY AND ALL LIABILITY FOR NEGLIGENCE, FAILURE TO WARN, OR LACK OF REASONABLE CARE AND (B) THE ENTIRE RISK OF THE USE OF ANY CERTIPATH CERTIFICATES, ANY SERVICES PROVIDED BY CERTIPATH, OR THE VALIDATION OF ANY DIGITAL SIGNATURES LIES WITH THE APPLICABLE PARTICIPANT. 9.8 Limitations of Liabilities A non-Raytheon Subscriber or entity shall have no claim against Raytheon arising from or relating to any certificate issued by a Raytheon CA or a CA's determination to terminate a certificate. Raytheon is not liable for any losses, including direct or indirect, incidental, consequential, special, or punitive damages. OTHER THAN THE ABOVE DESCRIBED LIMITATIONS OF LIABILITY, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL RAYTHEON BE LIABLE FOR ANY INDIRECT DAMAGES OF ANY KIND, INCLUDING CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE, OR OTHER DAMAGES WHATSOEVER ARISING OUT OF OR RELATED TO THIS CP, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE TOTAL, AGGREGATE LIABILITY OF RAYTHEON ARISING OUT OF OR RELATED TO THIS CP SHALL BE LIMITED TO DIRECT DAMAGES ACTUALLY INCURRED BY THE RELAYING PARTY , UP TO THE GREATER OF (A) THE AMOUNTS ACTUALLY PAID TO RAYTHEON UNDER A MUTUALLY ACCEPTABLE CONTRACT BY THE PARTY CLAIMING SUCH DAMAGES DURING THE TWELVE MONTHS IMMEDIATELY PRECEDING THE EARLIEST EVENT(S) GIVING RISE DIRECTLY TO THE LIABILITY OR (B) TEN THOUSAND DOLLARS ($10,000 USD). THE TOTAL, AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO IMPROPER ACTIONS SHALL BE LIMITED TO ONE THOUSAND DOLLARS ($1,000 USD) PER TRANSACTION AND ONE MILLION DOLLARS ($1 MILLION USD) PER INCIDENT). 9.9 Indemnities 9.9.1 Indemnification by Cross Certified CAs To the extent permitted by applicable law with respect to certificates issued by Cross Certified CAs, Cross Certified CAs are required to indemnify Raytheon for: 79 7/25/2011
Page 1 and 2:
Raytheon Company Public Key Infrast
Page 3 and 4:
Table of Contents 1 INTRODUCTION ..
Page 5 and 6:
4.6.7 Notification of Certificate I
Page 7 and 8:
5.4.8 Vulnerability Assessments ...
Page 9 and 10:
9 OTHER BUSINESS AND LEGAL MATTERS
Page 11 and 12:
1 INTRODUCTION This Certificate Pol
Page 13 and 14:
1.1.3 Scope The following diagram r
Page 15 and 16:
1. The CAs asserting id-raytheon-SH
Page 17 and 18:
approval of the PMA. The ROA activi
Page 19 and 20:
� Raytheon employees and eligible
Page 21 and 22:
1.5 Policy Administration 1.5.1 Org
Page 23 and 24:
3.1 Naming 3 IDENTIFICATION & AUTHE
Page 25 and 26:
establishing how the applicant is k
Page 27 and 28: 4. The Identity Verifier shall reco
Page 29 and 30: 3.3.1 Identification and Authentica
Page 31 and 32: For subscriber certificates, the pr
Page 33 and 34: 4.3.1 CA Actions during Certificate
Page 35 and 36: 4.7.4 Notification of New Certifica
Page 37 and 38: Any CA may unilaterally revoke anot
Page 39 and 40: 4.9.8 Maximum Latency for CRLs The
Page 41 and 42: 4.12.2 Session Key Encapsulation an
Page 43 and 44: depart shall initial a sign-out she
Page 45 and 46: � Performing or overseeing intern
Page 47 and 48: � Be trustworthy; � Have no oth
Page 49 and 50: administrative documents (e.g., Adm
Page 51 and 52: REVOCATION PROFILE MANAGEMENT Audit
Page 53 and 54: It is acceptable for the system to
Page 55 and 56: 5.6 Key Changeover A CA uses a sign
Page 57 and 58: If a RA signature keys are compromi
Page 59 and 60: show that appropriate role separati
Page 61 and 62: Hashing: Cryptographic Function Has
Page 63 and 64: 6.2 Private Key Protection and Cryp
Page 65 and 66: 6.3 Other Aspects of Key Management
Page 67 and 68: � All hardware must be shipped or
Page 69 and 70: 7 CERTIFICATE, CRL AND OCSP PROFILE
Page 71 and 72: When multiple values exist for an a
Page 73 and 74: 8 COMPLIANCE AUDIT AND OTHER ASSESS
Page 75 and 76: 9.1 Fees 9 OTHER BUSINESS AND LEGAL
Page 77: � There are no material misrepres
Page 81 and 82: as a termination of this CP unless
Page 83 and 84: enforce the agreement to arbitrate,
Page 85 and 86: 10 CERTIFICATE, CRL, AND OCSP FORMA
Page 87 and 88: Field Value Policy Mapping For SHA-
Page 89 and 90: 10.3 Raytheon Root CA Certificate (
Page 91 and 92: 91 7/25/2011
Page 93 and 94: 10.6 Medium Assurance Signing CA Ce
Page 95 and 96: Field Value Entrust Version Info c=
Page 97 and 98: 10.9 Medium Assurance Code Signing
Page 99 and 100: Field Value Entrust Version Info En
Page 101 and 102: 10.12 Medium Assurance Domain Contr
Page 103 and 104: 10.13 Medium Assurance Role Signatu
Page 105 and 106: 10.15 OCSP Responder Certificate Th
Page 107 and 108: 10.17 Medium Assurance CA CRL Forma
Page 109 and 110: 11 PKI REPOSITORY INTEROPERABILITY
Page 111 and 112: BIBLIOGRAPHY The following document
Page 113 and 114: HTTP Hypertext Transfer Protocol IA
Page 115 and 116: 13 GLOSSARY Access Ability to make
Page 117 and 118: Client (application) A system entit
Page 119 and 120: Non-Repudiation Assurance that the
Page 121 and 122: other CA. (See superior CA). Subscr
show all

Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?