|
|
AusCERT CS Roadshow - rollout of the Certificate Service Manager |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Date: 28 September 2011 Original URL: http://www.auscert.org.au/render.html?cid=11262&it=14896 Road show updateThe 2011 road show has finished. All participant organisations are now using the AusCERT Certificate Services Manager (CSM). Thanks to everyone who attended a road show session! Key datesThe rollout of the Certificate Service Manager, commencing from 24 October 2011, will provide full access to the AusCERT certificate service subscription options, including for SSL, personal and code signing certificates. However, before POs can access the CSM, and gain full access to the certificate services, there are a number of dates by which POs must take action in order to participate in the CSM workshops in October and November 2011. The following dates are important and require action:
AusCERT stops issuing certificates on behalf of POs using centralised process commencing 24 October 2011In accordance with a staggered schedule (outlined below) ** AusCERT stops issuing certificates on behalf of POs through the current centralised process from 24 October 2011. Instead, all POs with signed AusCERTCS Agreements will use the CSM to manage certificate life cycle and issue certificates through the self-provisioning web interface. AusCERT will continue to provide a role as the sub-CA to independently verify the identity of organisations, authorisation of account administrators, and domain control or ownership, and provide other support for the CS. POs must sign the AusCERT CS Participant Organisation Agreement by 31 October 2011At present (3 October 2011), 27 POs that have signed the AusCERT CS Participant Organisation Agreement agreement and are eligible for full access to the Certificate Service. There are currently 12 POs, that have not signed the agreement. If your organisation has not signed an agreement and wishes to:
please sign the agreement no later than 31 October 2011. The Participant Organisation Areement and Schedule 1 can be downloaded from http://cs.auscert.org.au/repository POs must ensure that Schedule 1 of the Subscriber Agreement is up to date and signed before attending the workshopOnly authorised RAOs and DRAOs are allowed to attend the CSM workshop. Authorised RAOs and DRAOs will be given administrator access to the CSM and hence must be previously authorised by the organisations to do so, and aware of their roles and responsibilities. Hence, if there are changes to staff roles in your organisation, please send a signed and updated and Schedule 1 to AusCERT CS, no later than the dates below. * POs must make a decision about SMIME key escrow before enrolment to use the CSM occursFor guidance about whether your organisation should enable key escrow, please read the guide prepared by AusCERT. Please note this decision is permanent and cannot be changed once an organisation has been enrolled in the CSM. After the cut-off dates for notification (listed below) AusCERT will configure organisations with the recommended NO escrow option if an explicit notification has not been received. Escrow functionality, with some limitations, will still be available to organisations adopting this configuration. See the following schedule of dates by which decisions must be made. You will note that the decision must be made before the CSM workshop occurs to enable AusCERT time to create accounts based on the requested organisational settings.
Roadshow schedule - Certificate Service Manager (CSM) workshopPOs interested in participating in the roadshow workshop should check the dates below for the dates best suited to their geographical location.
Workshops are free and will run from 10 am to 4 pm. Lunch, morning and afternoon tea is included. Registration processEach workshop has capacity for a maximum of 30 attendees. The spots for each PO will vary from region to region. As such we may need to vary the numbers each PO can have based on their subscription model and number of POs within that state/geographical region. We will update this page with further details of limits. However, where possible we will accommodate requests for places. Attendance at the workshop is restricted to authorised RAOs and DRAOs where AusCERT has received a completed and signed schedule naming the authorised RAOs and DRAOs. To register your interest in attending your nearest/local workshop, please send an email to auscertcs@uq.edu.au with details of the names of the authorised RAOs or DRAOs you wish to attend. Register by the dates above. * As a guide AusCERT will allocate spaces according to the following guide:
If certain workshops have less demand than others for places, there may be the opportunity to modify, the places that some POs are allocated. Based on overall demand for attendance at each workshop, and where a PO has a AusCERT CS Participant Organisation Agreement in place, AusCERT will notify POs that their registration is confirmed the day after registration closing dates. * |