|
Effective February 26 the list of permitted X509 certificates will change. Beginning on that date, externals may only use those certificates and intermediaries who are listed on the General Services Administration (GSA) bridge. This means many of the ones previously used by externals will no longer be allowed.
Externals with accounts (system ids) using current certificates can continue using those certificates for those system ids (after February 26) until the certificate expires.
On February 26, 2012, and after, any new accounts or new system ids for existing accounts must use a certificate listed on the new list of permitted certificates.
Externals with existing certificate accounts should consider adding more system ids before February 26, 2012, and assigning them their existing certificate. This way they will not find themselves in the position of having to purchase a new certificate because they find a need to create another system id. Of course, once their existing certificate expires they will have to purchase a new one from the list of permitted certificates.
The new list of certificates and how to acquire those is stated below.
Identrust ACES Business Representative (already supported), naming an individual: Go to identrust and choose the Certificates menu and the type of ACES (currently ACES Business Representative). The type to choose is "ACES Business Representative".
Identrust ACES SSL (newly supported), naming a server: Go to Identrust and choose the Certificates menu and the type of ACES (currently ACES SSL). The type to choose is "ACES SSL Server".
ORC ACES Business Representative (newly supported), naming an individual: Go to ACES ORC and follow the "Get Certificate" button. When you reach the "Select a Certificate" screen, choose "Business Representative". Please note that we have not tested with the Government Representative types and do not know if they will work with our system. We don't expect state and local governments to use ORC Government Representative certificates.
ORC ECA (newly supported), naming a server: Go to ORC ECA and select "Order Component/Server Certificates". On the screen for order, please choose "Server Certificates".
Please contact the MeF Mailbox for any questions or concerns you may have regarding this.
|
