CA:CommonCADatabase: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Creating initial text)
(Moved content to ccadb.org)
 
(57 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{DRAFT}}
= Common CA Database (CCADB) =
= Common CA Database (CCADB) =
Historically, [https://en.wikipedia.org/wiki/Certificate_authority Certification Authorities (CAs)]have had to separately submit data to multiple, individual root store operators, resulting in inefficiency and duplication of effort. Mozilla maintains a CRM instance for communicating with CAs and managing CA data, called the Common CA Database (CCADB), which was originally referred to as the CA Community in Salesforce. Through the CCADB, our goal is to enable CAs to directly provide updates to all participating root store operators at once, and to reduce duplication of effort across the root store operators.
<br />
* A [[CA:CommonCADatabase:RootStoreOperators|'''Root Store Member''']] is any root store operator participating in the Common CA Database via the [[File:MozillaCommonCADatabaseAgreement.pdf|Mozilla Common CA Database Agreement]].
The content of this page has been moved to http://ccadb.org/
* A '''CA Member''' is any CA participating in the Common CA Database via a [https://www.salesforce.com/communities/features/ Community license]. CA Members have read-only access to all root certificate data, and are able to enter and modify data regarding intermediate certificates chaining up to their own root certificates.
<br />


= Request a license =
CA Community Licenses are granted to CAs in the root store programs of participating root store operators. You only need one CA Community License to access the CCADB data relating all participating root store operators.
To request a license:
* Specific instructions for CAs in Microsoft's CA Program -- '''TO DO - ADD LINK'''
* [[CA:SalesforceCommunity|Specific instructions for CAs in Mozilla's CA Program]]


= Getting Started =
= Getting Started =
After you receive email with your CA Community License, you may login to the Common CA Database by:
<br />
# Browse to: https://mozillacacommunity.force.com/
The content of this section has been moved to http://ccadb.org/cas/getting-started
# Enter your Username; the email address for which your Community User License was issued
<br />
# Enter the Password that you set up during first access
# Click on the "Log in to CA Community" button


Upon initial login you will see a row with three tabs:
= Updating Audit Information =
# CA Owners/Certificates
<br />
#* Click on "CA Owners/Certificates" tab, then in "View:" select "Community User's CA Owners/Certificates" and click on "Go!". This will list the CA Owner and all of the root and intermediate certificates associated with your account. Click on the "CA Owner/Certificate Name" to view the record. Within the record you will see an Account Hierarchy section, where you can click on each root or intermediate certificate record to view the data.
The content of this section has been moved to http://ccadb.org/cas/updates
#* Click on "CA Owners/Certificates" tab, then in "View:" select "All Included CA Owners" and click on "Go!". You will see all of the CAs who have root certificates included in the NSS root store. Click on the CA Owner Name, to view the record.
<br />
#* Click on "CA Owners/Certificates" tab, then in "View:" select "Community User's Intermediate Certs" and click on "Go!". This will list the intermediate certificates associated with your account. Click on the "CA Owner/Certificate Name" to view the record.
# Contacts
#* Click on "Contacts" tab, then in "View:" select "All Contacts" and click on "Go!". Click on the Name to view the contact record.
#* Note: If any of the contact information for your CA needs to be updated, then send email to Kathleen. CA Community licenses do not enable the CA to directly modify their contact data.
# Reports
#* Click on "Reports" tab, then click on the "CA Community Reports" link along the left column, then click on one of the reports in the list. Whenever you click on the "Reports" tab it will list the reports that you have recently viewed. You will need to click on the "CA Community Reports" link to see all of the reports that are available to you.
 
Important Notes:
* Each Owner/Certificate record has a "CA Owner/Certificate Name" field. For a certificate record, the value of this field is usually the Certificate '''Subject''' Common Name of the certificate. For a CA Owner record, this field displays the CA's name. (We cannot change the title of the field in the page, due to the way we are using it in Salesforce.)
* Each Certificate record has a "Parent CA Owner/Certificate" field. For an intermediate certificate record the value of the field should be the Certificate '''Issuer''' Common Name. For a root certificate record the value of the field will be the name of the CA owner. (We cannot change the title of the field in the page, due to the way we are using it in Salesforce.)
* CA Community Users cannot modify the records for: Owner, Root Certificate, and Contact. Only the [[Modules/All#CA_Certificates|CA Certificates Module Owner and Peers]] can modify these records.
* CA Community Users can only modify the intermediate certificate records for their CA.
* The Intermediate certificate records have a Status field that may not be modified by CAs.
* When PEM data is provided, the certificate details in the record may not be modified.
* PEM data must be provided for every intermediate certificate (chaining up to a root certificate in Mozilla's program) that is not [[CA:CertificatePolicyV2.1#Technical_Constraints_or_Auditing.2FDisclosure_of_Intermediate_Certificates|Technically Constrained]] via Extended Key Usage and Name Constraint settings. Policy documentation and audit statements must also be provided for these non-technically-constrained intermediate certificates, as per section 10 of [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/inclusion/ Mozilla's CA Certificate Inclusion Policy].

Latest revision as of 22:49, 8 June 2017

Common CA Database (CCADB)


The content of this page has been moved to http://ccadb.org/


Getting Started


The content of this section has been moved to http://ccadb.org/cas/getting-started

Updating Audit Information


The content of this section has been moved to http://ccadb.org/cas/updates

Retrieved from "https://wiki.allizom.org/index.php?title=CA:CommonCADatabase&oldid=1173030"