© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statement© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statement
Digital Signature Trust Co.
Certification Practices StatementFor Access Certificates for Electronic Services (ACES)
Version 3.2Copyright 2001 Digital Signature Trust Co. All rights reserved.This document is subject to change without notice.
© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statement© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statementii
Table of Contents
1 INTRODUCTION....................................................................................................1
1.1 CPS O
VERVIEW
.....................................................................................................11.2 P
OLICY
I
DENTIFICATION
.........................................................................................11.3 C
OMMUNITY AND
A
PPLICABILITY
..........................................................................2
1.3.1 Approved Applications...................................................................................31.3.2 Prohibited Applications..................................................................................3
1.4 C
ONTACT
D
ETAILS
................................................................................................3
2 GENERAL PROVISIONS.......................................................................................4
2.1 R
IGHTS AND
O
BLIGATIONS
.....................................................................................4
2.1.1 CA Rights and Obligations.............................................................................42.1.2 CA Right to Subcontract................................................................................42.1.3 RA Obligations...............................................................................................52.1.4 Subscriber Contractual Obligations...............................................................52.1.5 Applicant (Person Authorized to Receive Certificate for Qualified RelyingParty Application).....................................................................................................29 AUTHORIZING OFFICIAL OF QUALIFIED RELYING PARTY.............................292.1.6 Relying Party Rights and Obligations..........................................................312.1.6 Repository Obligations....................................................................................31
2.2 L
IABILITY
.............................................................................................................31
2.2.1 CA Liability..................................................................................................322.2.2 RA Liability...................................................................................................322.2.3 Repository Liability......................................................................................32
2.3 F
INANCIAL
R
ESPONSIBILITY
.................................................................................322.4 I
NTERPRETATION AND
E
NFORCEMENT
..................................................................32
2.4.1 Governing Law............................................................................................322.4.2 Severability, Survival, Merger, and Notice..................................................322.4.3 Dispute Resolution Procedures....................................................................33
2.5 F
EES
.....................................................................................................................33
2.5.1 Certificate Issuance or Renewal Fees..........................................................332.5.2 Certificate Access Fees................................................................................332.5.3 Revocation or Status Information Access Fees............................................332.5.4 Fees for Other Services Such as Policy Information...................................332.5.5 Refund Policy...............................................................................................33
2.6 P
UBLICATION AND
R
EPOSITORY
...........................................................................34
2.6.1 Publication of CA Information....................................................................342.6.2 Frequency of Publication.............................................................................342.6.3 Access Controls............................................................................................342.6.4 Repositories..................................................................................................34
2.7 C
OMPLIANCE
A
UDIT
............................................................................................342.8 C
ONFIDENTIALITY AND
P
RIVACY
..........................................................................35
© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statement© 2001 Digital Signature Trust Co. All rights reserved.Certification Practices Statementiii
2.9 I
NTELLECTUAL
P
ROPERTY
R
IGHTS
........................................................................36
3 IDENTIFICATION AND AUTHENTICATION..................................................37
3.1 I
NITIAL
R
EGISTRATION
.........................................................................................37
3.1.1 Types of Names............................................................................................37 3.1.2 Need for Names to be Meaningful...............................................................37 3.1.3 Rules for Interpreting Various Name Forms................................................383.1.4 Uniqueness of Names...................................................................................383.1.5 Name Claim Dispute Resolution Procedure.................................................383.1.6 Recognition, Authentication, and Role of Trademarks................................383.1.7 Verification of Possession of Key Pair.........................................................383.1.8 Authentication of Organizational Identity...................................................393.1.9 Authentication of Individual Identity...........................................................39
3.2 R
OUTINE
R
EKEY AND
C
ERTIFICATE
R
ENEWAL
......................................................393.3 R
EKEY
A
FTER
R
EVOCATION
..................................................................................393.4 R
EVOCATION
R
EQUEST
.........................................................................................39
4 OPERATIONAL REQUIREMENTS....................................................................40
4.1 C
ERTIFICATE
A
PPLICATION
..................................................................................404.2 C
ERTIFICATE
I
SSUANCE
........................................................................................424.3 C
ERTIFICATE
A
CCEPTANCE
..................................................................................424.4 C
ERTIFICATE
S
USPENSION AND
R
EVOCATION
.......................................................43
4.4.1 Circumstances for Revocation.....................................................................434.4.2 Who Can Request Revocation......................................................................444.4.3 Procedure for Revocation Request...............................................................454.4.4 Circumstances for Suspension.....................................................................454.4.5 Who Can Request Suspension......................................................................454.4.6 Procedure for Suspension Request...............................................................46 4.4.7 Limits on Suspension Period........................................................................46 4.4.8 CRL Issuance Frequency (If Applicable)......................................................46 4.4.9 Online Revocation/Status Checking Availability.........................................46 4.4.10 Online Revocation Checking Requirements.................................................47 4.4.11 Other Forms of Revocation Advertisements Available................................47 4.4.12 Checking Requirements for Other Forms of Revocation Advertisements...47 4.4.13 Special Requirements Rekey Compromise...................................................47
4.5 S
ECURITY
A
UDIT
P
ROCEDURES
.............................................................................474.6 R
ECORDS
A
RCHIVAL
.............................................................................................48
4.6.1 Types of Events Recorded............................................................................484.6.2 Retention Period for Archive.......................................................................514.6.3 Protection of Archive...................................................................................514.6.4 Archive Backup Procedures.........................................................................524.6.5 Archive Collection System (Internal or External)........................................52
Search History:
Result 00 of 00
00 results for result for
p.
5.2.3 Directory/Repository Administrators for Department of Labor: aces cps
3.9K
Reads
0
Readcasts
1
Embed Views
More From This User
Notes
Load more
