CA/Information Checklist: Difference between revisions

Jump to navigation Jump to search

CA/Information Checklist (view source)

Revision as of 21:50, 17 October 2023

818 bytes removed ,  17 October 2023
Updating to remove duplication with the ccadb.org website and instructions documents
(Updating to remove duplication with the ccadb.org website and instructions documents)
(Updating to remove duplication with the ccadb.org website and instructions documents)
Line 27: Line 27:
# Click on the "Submit to Root Store" button.
# Click on the "Submit to Root Store" button.


Note:
'''Important''':
* Audit statements must meet the requirements listed in [https://www.ccadb.org/policy#51-audit-statement-content section 5.1 of the CCADB Policy] '''and''' [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#3-documentation in section 3 of the Mozilla Root Store Policy].
* Audit statements must meet the requirements listed in [https://www.ccadb.org/policy#51-audit-statement-content section 5.1 of the CCADB Policy] '''and''' [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#3-documentation in section 3 of the Mozilla Root Store Policy].
** Also see Mozilla's [[CA/Audit_Statements#Audit_Lifecycle|audit lifecycle requirements]]
** Also see Mozilla's [[CA/Audit_Statements#Audit_Lifecycle|audit lifecycle requirements]]
Line 35: Line 35:
* If you are requesting that the Websites (TLS) trust bit be enabled for your root certificate(s), then be sure to provide the 3 test websites (valid, expired, revoked) in the TEST WEBSITES tab.
* If you are requesting that the Websites (TLS) trust bit be enabled for your root certificate(s), then be sure to provide the 3 test websites (valid, expired, revoked) in the TEST WEBSITES tab.
** Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation'
** Click on the 'Test Websites Validation' button, resolve all failures, then click on 'Re-run Validation'
* Add records to the CCADB for all existing intermediate certificates chaining up to the new root certificate(s).
** https://www.ccadb.org/cas/intermediates


=== Create a "Root Inclusion Request" Case ===
=== Create a "Root Inclusion Request" Case ===
# Create a [https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341 Root Inclusion Case] in the CCADB  
After you have provided information to the CCADB about your CA organization and root certificates, you may use a "Root Inclusion Request" case to request that your root certificate(s) be included in Mozilla's root store, update trust bit settings, and/or enable EV treatment.
#*Click on the 'My CA' tab
# Create a [https://www.ccadb.org/cas/inclusion "Root Inclusion Request" Case] in the CCADB
#*Click on the 'CASES' tab under the CA Owner’s name, near the top left corner of the page
#* Detailed Instructions: [https://docs.google.com/document/d/1FHSbpNJ3CQOcpVqrj66elKQhTmpllp-IBsDovPy6cOo/edit# Create a Root Inclusion Request]
#* Click on the 'New' button, which is on the right side of the page, below the 'Get URLs' button
#* Example: https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341
#* Select 'Root Inclusion Request', and click on 'Next'
* Fill in all of the fields in the MOZILLA tab
#* Type in information for the 'Subject', e.g. XYZ Root Certificates
# Click on the "Submit to Root Store" button.
#* Click on the 'Save' button.
#** There will be a green bar shown across the top of the page, which says “Case ###### was created. Click on the number in the list below (the same which was provided by green bar) to view the new Case.
# '''Additional instructions for creating a root inclusion case are available [https://www.ccadb.org/cas/inclusion here] and [https://docs.google.com/document/d/1FHSbpNJ3CQOcpVqrj66elKQhTmpllp-IBsDovPy6cOo here].'''


'''ADDITIONAL INSTRUCTIONS'''
'''Important''':
 
* In the MOZILLA tab, click on the "Print View" button to see the data that will be shared publicly about your request.
#* Add records to the CCADB for all existing intermediate certificates chaining up to this root certificate
* Click on the "Get URLs" button (which may be in the button overflow – upside down triangle) and copy the line that begins with “Mozilla Root Inclusion Case Information:” into a Comment in [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|your Bugzilla Bug]]. The line to copy and paste into the Bugzilla Bug looks like:  
#* Update the 'Mozilla Fields' section to indicate which Mozilla Trust Bits are being requested (e.g. Email, Websites), and if EV treatment is being requested.
**Mozilla Root Inclusion Case Information: https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341
#* Make sure that Mozilla is listed in the 'Root Stores Applying To' field. If it is not, then go back to the Case page, click on the 'Add/Update Root Cases' button, click on the Mozilla checkbox  corresponding to the root certificate, then click on the 'Apply Changes' button.
* Whenever you update data in your Root Inclusion Case in the CCADB, be sure to [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|add a comment to your Bugzilla Bug]] to let folks know to re-check the information.'''
#Fill in the remaining information
#*On the 'Mozilla' page, click on the 'Print View' to see where further information is needed.
#Click on the 'Get URLs' button (which may be in the button overflow – upside down triangle) and copy the line that begins with “Mozilla Root Inclusion Case Information:” into a Comment in [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|your Bugzilla Bug]]. The line to copy and paste into the Bugzilla Bug looks like:  
#*Mozilla Root Inclusion Case Information: https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00000341
 
IMPORTANT:
* '''Whenever you update data in your Root Inclusion Case in the CCADB, be sure to [[CA/Application_Instructions#Create_Root_Inclusion.2FUpdate_Request|add a comment to your Bugzilla Bug]] to let folks know to re-check the information.'''
* Fields for which a root store operator has set "Data Verified" cannot be edited until you ask the root store operator to change the corresponding status back to "Not Verified".


== CA Primary Point of Contact (POC) ==
== CA Primary Point of Contact (POC) ==
Kathleen Wilson
Confirmed users, Administrators
5,526

edits

Retrieved from "https://dev.wikimo.nonprod.webservices.mozgcp.net/Special:MobileDiff/1248620"

Navigation menu