20 likes | 144 Views
c=US. Proposed BCA Phase 2 Demonstration Directory Information Tree (version 4). o=U.S. Government. ou=DoD. ou=Law Enforcement. cn= DoD Bridge. ou=Coast Guard. ou=Navy. ou=FBI. ou=DISA. cn= DoD Bridge CA. ou=Army. ou=Air Force. ou= FBI. ou= Coast Guard.
E N D
c=US Proposed BCA Phase 2 Demonstration Directory Information Tree(version 4) o=U.S. Government ou=DoD ou=Law Enforcement cn= DoD Bridge ou=Coast Guard ou=Navy ou=FBI ou=DISA cn= DoD Bridge CA ou=Army ou=Air Force ou= FBI ou= Coast Guard These are the Entrust CAs, stored in a CA attribute at this point in the DIT These are the Motorola CAs cn= AF/DISA Root cn= AF/DISA ICA Locations layer: ou=locations, l=Annapolis Junction or l=McLean (as appropriate) (used for end-entities, not used for CAs) cn= AF/DISA CA Entrust-certified users at VDA / Annapolis Junction SPYRUS-certified users at VDA / Annapolis Junction Motorola-certified users at VDA / Annapolis Junction These are the SPYRUS CAs cn= Army/Navy Root Entrust-certified users at CygnaCom / McLean SPYRUS-certified users at CygnaCom / McLean Motorola-certified users at CygnaCom / McLean cn= Army/Navy ICA cn= Army/Navy CA Example: c=US, o=U.S. Government, ou=DoD, ou=Air Force, ou=Locations, l=McLean (Motorola), cn=AF User 1 Example: c=US, o=U.S. Government, ou=Law Enforcement, ou=FBI, ou=locations, l=McLean (Entrust), cn= FBI User 1 Example: c=US, o=U.S. Government, ou=DoD, ou=Locations, l=Annapolis Junction (SPYRUS), cn=Army/Navy CA
BCA Phase 2 DemonstrationSummary PKI Graph BCA (L1) LawEnforcementCA Army/Navy Root AF/DISA Root CoastGuardCA Army/Navy ICA AF/DISA ICA FBICA Army/Navy CA AF/DISA CA ENTRUST CAs SPYRUS CAs Motorola CAs