và điều khiển hoạt động điều khiển Giấy chứng nhận kỹ thuật an ninh, CRL, và Kiểm toán OCSP Profiles Tuân thủ và đánh giá khác kinh doanh và các vấn đề pháp lý Lưu ý RFC 3647 đề nghị cùng một định dạng được sử dụng cho cả hai chính sách giấy chứng nhận và CPSs. chính sách giấy chứng nhận cho | Chapter 3 Policies and PKI 49 standard CPS format to ensure compatibility between organizations and promote a stronger degree of trust of an organization s CPS by other companies. The RFC recommends the following nine sections Introduction Publication and Repository Responsibilities Identification and Authentication I A Certificate Life-Cycle Operational Requirements Facility Management and Operational Controls Technical Security Controls Certificate CRL and OCSP Profiles Compliance Audit and Other Assessment Other Business and Legal Matters Note RFC 3647 recommends that the same format be used for both certificate policies and CPSs. The certificate policies for both the United States Department of Defense and the United States FBCA implement the nine sections discussed here. Differences between the certificate policy and the CPS are mainly related to the documents focus. A certificate policy focuses on subject validation and is often compared between organizations to find similar policies whereas a CPS describes the operations of the CA to enforce the implemented certificate policies. CPS Section Introduction The introduction of a CPS provides an overview of the CA as well as the types of users computers network devices or services that will receive certificates. The introduction also includes information on certificate usage. This includes what types of applications can consume certificates issued under the CP or CPS and what types of applications are explicitly prohibited from consuming the CA s certificates. If a representative of another organization has any questions regarding the information published in the CPS the introduction also provides contact information. CPS Section Publication and Repository Responsibilities The Publication and Repository Responsibilities section contains details regarding who operates the components of the public key infrastructure. This section also describes the responsibilities for publishing the CP or CPS whether the CP
