-
Authentication of
organization identity - document our current practice Check PAG
section D.3.2.5 for additional information.
-
Rekeying and
reissuing, renewal
-
Host/service
certificate issuing policy - by policy we say only valid cert holders can
apply - do we want this, should we enforce it?
- 3.1.3 Uniqueness of names - allow multiple certificates per
host - no FQDN requirement.
- Postponed for additional discussion.
- Sec 1.1 add ESnet's relationship to LBNL
- sec 1.3.1 add system architecture delineate what parts are
managed by ESnet and other organizations.
- Added, including table of
components.
- sec 2.1.2 add subscriber definition
- Added to general definitions sec 1.1.1
- Add Acronym definitions
- sec 3.1.5 clean up the definition of how we do Individual
identity. Also how RM's will be used and deployed - tie to sec 1.3.1.
- Added text and link to certificate work
flow
- sec 4.2.2 Format error and redundant information
- could not find - old problem??
- App A A.2, item 8 Add emphasize that the Rags may NOT do
the following...
- Replace section 6.1.9 with input from list.
- Replaced with Von's input
- CRL distribution point located in PKI1 certificate. Where should it
point to?
- Changed 2.1.4 to reflect the new repositories.
- How to vet new RAs?
- Moved and described in the new PMA charter.