Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

More documents

Recommendations

Info

6.3 Other Aspects of Key Management ........................................................................... 65 6.3.1 Public Key Archival .................................................................................................. 65 6.3.2 Certificate Operational Periods/Key Usage Periods ................................................ 65 6.4 Activation Data ............................................................................................................. 65 6.4.1 Activation Data Generation and Installation ............................................................ 65 6.4.2 Activation Data Protection ....................................................................................... 65 6.4.3 Other Aspects of Activation Data ............................................................................ 65 6.5 Computer Security Controls ....................................................................................... 66 6.5.1 Specific Computer Security Technical Requirements ............................................. 66 6.5.2 Computer Security Rating ....................................................................................... 66 6.6 Life-Cycle Technical Controls .................................................................................... 66 6.6.1 System Development Controls ................................................................................ 66 6.6.2 Security Management Controls ............................................................................... 67 6.6.3 Life Cycle Security Controls .................................................................................... 67 6.7 Network Security Controls .......................................................................................... 67 6.8 Time Stamping ............................................................................................................. 67 7 CERTIFICATE, CRL AND OCSP PROFILES................................................................... 69 7.1 Certificate Profile ......................................................................................................... 69 7.1.1 Version Numbers ..................................................................................................... 69 7.1.2 Certificate Extensions .............................................................................................. 69 7.1.3 Algorithm Object Identifiers ..................................................................................... 69 7.1.4 Name Forms ............................................................................................................ 69 7.1.5 Name Constraints .................................................................................................... 71 7.1.6 Certificate Policy Object Identifier ........................................................................... 71 7.1.7 Usage of Policy Constraints Extension ................................................................... 71 7.1.8 Policy Qualifiers Syntax and Semantics .................................................................. 71 7.1.9 Processing Semantics for the Critical Certificate Policy Extension ......................... 71 7.2 CRL Profile ................................................................................................................... 72 7.2.1 Version Numbers ..................................................................................................... 72 7.2.2 CRL and CRL Entry Extensions .............................................................................. 72 7.3 OCSP Profile ................................................................................................................. 72 7.3.1 Version Number ...................................................................................................... 72 7.3.2 OCSP Extensions .................................................................................................... 72 8 COMPLIANCE AUDIT AND OTHER ASSESSMENTS .......................................................... 73 8.1 Frequency or Circumstances of Assessments ......................................................... 73 8.2 Identity and Qualifications Of Assessor .................................................................... 73 8.3 Assessor’s Relationship To Assessed Entity ........................................................... 73 8.4 Topics Covered By Assessment ................................................................................ 73 8.5 Actions Taken as a Result of Deficiency ................................................................... 73 8.6 Communication of Results ......................................................................................... 74 8 7/25/2011
9 OTHER BUSINESS AND LEGAL MATTERS ..................................................................... 75 9.1 Fees ............................................................................................................................... 75 9.1.1 Certificate Issuance and Renewal Fees .................................................................. 75 9.1.2 Certificate Access Fees ........................................................................................... 75 9.1.3 Revocation or Status Information Access Fees ...................................................... 75 9.1.4 Fees for Other Services .......................................................................................... 75 9.1.5 Refund Policy .......................................................................................................... 75 9.2 Financial Responsibility .............................................................................................. 75 9.2.1 Insurance Coverage ................................................................................................ 75 9.2.2 Other Assets ............................................................................................................ 75 9.2.3 Insurance or Warranty Coverage for End-Entities ................................................... 75 9.3 Confidentiality of Business Information .................................................................... 75 9.4 Privacy of Personal Information ................................................................................. 76 9.5 Intellectual Property Rights ........................................................................................ 76 9.5.1 Property Rights in Certificates and Revocation Information .................................... 76 9.5.2 Property Rights in the CPS ..................................................................................... 76 9.5.3 Property Rights in Names ....................................................................................... 76 9.5.4 Property Rights in Keys ........................................................................................... 76 9.6 Representations and Warranties ................................................................................ 76 9.6.1 CA Representations and Warranties ....................................................................... 76 9.6.2 Subscriber ............................................................................................................... 77 9.6.3 Relying Party ........................................................................................................... 78 9.6.4 Registration Authority .............................................................................................. 78 9.6.5 Representations and Warranties of Other Participants ........................................... 78 9.7 Disclaimers of Warranties ........................................................................................... 79 9.8 Limitations of Liabilities .............................................................................................. 79 9.9 Indemnities ................................................................................................................... 79 9.9.1 Indemnification by Cross Certified CAs ................................................................... 79 9.9.2 Indemnification by Relying Parties .......................................................................... 80 9.10 Term and Termination .............................................................................................. 80 9.10.1 Term ........................................................................................................................ 80 9.10.2 Termination ............................................................................................................. 80 9.10.3 Effect of Termination and Survival .......................................................................... 81 9.11 Individual Notices and Communications with Participants .................................. 81 9.12 Amendments ............................................................................................................. 81 9.12.1 Procedure for Amendment ...................................................................................... 81 9.12.2 Notification Mechanism and Period ......................................................................... 82 9.12.3 Circumstances under Which OID Must be Changed ............................................... 82 9.13 Dispute Resolution Provisions ................................................................................ 82 9 7/25/2011
Page 1 and 2: Raytheon Company Public Key Infrast
Page 3 and 4: Table of Contents 1 INTRODUCTION ..
Page 5 and 6: 4.6.7 Notification of Certificate I
Page 7: 5.4.8 Vulnerability Assessments ...
Page 11 and 12: 1 INTRODUCTION This Certificate Pol
Page 13 and 14: 1.1.3 Scope The following diagram r
Page 15 and 16: 1. The CAs asserting id-raytheon-SH
Page 17 and 18: approval of the PMA. The ROA activi
Page 19 and 20: � Raytheon employees and eligible
Page 21 and 22: 1.5 Policy Administration 1.5.1 Org
Page 23 and 24: 3.1 Naming 3 IDENTIFICATION & AUTHE
Page 25 and 26: establishing how the applicant is k
Page 27 and 28: 4. The Identity Verifier shall reco
Page 29 and 30: 3.3.1 Identification and Authentica
Page 31 and 32: For subscriber certificates, the pr
Page 33 and 34: 4.3.1 CA Actions during Certificate
Page 35 and 36: 4.7.4 Notification of New Certifica
Page 37 and 38: Any CA may unilaterally revoke anot
Page 39 and 40: 4.9.8 Maximum Latency for CRLs The
Page 41 and 42: 4.12.2 Session Key Encapsulation an
Page 43 and 44: depart shall initial a sign-out she
Page 45 and 46: � Performing or overseeing intern
Page 47 and 48: � Be trustworthy; � Have no oth
Page 49 and 50: administrative documents (e.g., Adm
Page 51 and 52: REVOCATION PROFILE MANAGEMENT Audit
Page 53 and 54: It is acceptable for the system to
Page 55 and 56: 5.6 Key Changeover A CA uses a sign
Page 57 and 58: If a RA signature keys are compromi
Page 59 and 60:
show that appropriate role separati
Page 61 and 62:
Hashing: Cryptographic Function Has
Page 63 and 64:
6.2 Private Key Protection and Cryp
Page 65 and 66:
6.3 Other Aspects of Key Management
Page 67 and 68:
� All hardware must be shipped or
Page 69 and 70:
7 CERTIFICATE, CRL AND OCSP PROFILE
Page 71 and 72:
When multiple values exist for an a
Page 73 and 74:
8 COMPLIANCE AUDIT AND OTHER ASSESS
Page 75 and 76:
9.1 Fees 9 OTHER BUSINESS AND LEGAL
Page 77 and 78:
� There are no material misrepres
Page 79 and 80:
� Ensure that certificate and rev
Page 81 and 82:
as a termination of this CP unless
Page 83 and 84:
enforce the agreement to arbitrate,
Page 85 and 86:
10 CERTIFICATE, CRL, AND OCSP FORMA
Page 87 and 88:
Field Value Policy Mapping For SHA-
Page 89 and 90:
10.3 Raytheon Root CA Certificate (
Page 91 and 92:
91 7/25/2011
Page 93 and 94:
10.6 Medium Assurance Signing CA Ce
Page 95 and 96:
Field Value Entrust Version Info c=
Page 97 and 98:
10.9 Medium Assurance Code Signing
Page 99 and 100:
Field Value Entrust Version Info En
Page 101 and 102:
10.12 Medium Assurance Domain Contr
Page 103 and 104:
10.13 Medium Assurance Role Signatu
Page 105 and 106:
10.15 OCSP Responder Certificate Th
Page 107 and 108:
10.17 Medium Assurance CA CRL Forma
Page 109 and 110:
11 PKI REPOSITORY INTEROPERABILITY
Page 111 and 112:
BIBLIOGRAPHY The following document
Page 113 and 114:
HTTP Hypertext Transfer Protocol IA
Page 115 and 116:
13 GLOSSARY Access Ability to make
Page 117 and 118:
Client (application) A system entit
Page 119 and 120:
Non-Repudiation Assurance that the
Page 121 and 122:
other CA. (See superior CA). Subscr
show all

Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

Create successful ePaper yourself

Delete template?

Save as template?