Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Scroll Ignore


Page properties


Target release

Release 1.1

Document owner
Reviewer



Goals

Provide The goal is to provide

Index term
primaryglobal policies
global policies that are valid for all EEs.

Background and Strategic Fit

...

  • The PG will generate a Global Policy File (GPF), which includes global policies relevant for EEs, as listed in Step 18.1: Policy Configuration Options.
  • The PG will make the GPF available to all RAs
  • The RA will combine policy fields in the GPF that are relevant to the EEs under its jurisdiction with its particular local policy fields relevant to those EEs.
  • The RA will send its combined local policy file to PG for assessment of compliance with all relevant global policies.
  • If approved, the PG will sign the RA-specific integrated policy file (local policy file - LPF) and send it back to the appropriate RA.
  • The RA will make the RA-specific integrated policy file (local policy file - LPF) available to all EEs within its jurisdiction.
  • The RA will convey changes to the global policies that affect EEs to all EEs within its jurisdiction through an updated LPF.

Requirements

Scroll Title
titleUse Case 18.3 - Requirements

Jira
serverJIRA
columnskey,status,summary,description,justification,notes,components
maximumIssues1000
jqlQueryproject = SCMS AND issuetype = Requirement AND labels = UseCase18Step3 ORDER BY key ASC
serverId3f76aaa0-2d76-3b5f-84c0-6ae2f6225665

...

Whenever there is a change in global policies that affect EEs, the RA constructs an updated version of its own LPF, gets its LPF approved (and signed) by the PG, and then makes the LPF available to the EEs within that RA's jurisdiction, for example i.e., whenever the EE submits a new certificate request, or otherwise contacts the RA, as appropriate. In the cases where the EE software and hardware can still support the global changes in the system, the EE will implement the changes upon receipt of the LPF containing those changes. If the policy changes are too significant for the EE to continue being functional, the EE may need to be updated or else possibly operate in a legacy mode. This could likely be managed by the relevant RA within the restrictions of global policies, but is out-of-scope for PoC.