OpenLegislation

Division 2.2.3.2

United Kingdom

Original text. Later amendments are not shown.

The following process shall be carried out for the certificate request creation:

  1. (a)

    The Organisation shall navigate to the user web interface to request the certificate via the URL https://sbca.telesec.de/sbca/ee/login/displayLogin.html?locale=en:, and shall enter the username ‘sbca/CEF_eDelivery.europa.eu’ and the password ‘digit.333’

  2. (b)

    The Organisation shall click on ‘request’ on the left side of the panel and shall select ‘CEF_TACHOnet’ in the dropdown list.

  3. (c)

    The Organisation shall populate the certificate request form laid down in Figure 4 with the information in Table 3, clicking on ‘Next (soft-PSE)’ to finish the process.

    Requested FieldsDescription
    Country

    C = Country Code, location of certificate owner, verified using a public directory;

    Constraints: 2 characters, in accordance to ISO 3166-1, alpha-2, Case Sensitive;

    Examples: DE, BE, NL,

    Specific cases: UK (for Great-Britain), EL (for Greece)

    Organisation/Company (O) O = Organisation name of the certificate owner
    Master domain (OU1) OU = CEF_eDelivery.europa.eu
    Area of responsibility (OU2) OU = CEF_TACHOnet
    Department (OU3)

    Mandatory value per ‘AREA OF RESPONSIBILITY’

    The content must be checked using a positive list (white list) when the certificate is requested. If the information does not correspond to the list, the request is prevented.

    Format:

    OU=<TYPE>-<GTC_NUMBER>

    Where ‘<TYPE>’ is replaced by AP_PROD: Access Point in Production environment.

    And where <GTC_NUMBER> is GTC_OID-1.3.130.0.2018.xxxxxx, where Ares(2018)xxxxxx is the GTC number for the TACHOnet project.

    e.g.:

    AP_PROD-GTC_OID-1.3.130.0.2018.xxxxxx

    First name (CN)Must be Empty
    Last name (CN)

    Must start with ‘GRP:’, followed by a common name.

    Format:

    CN = GRP:<AREA OF RESPONSIBILITY>_<TYPE>_<COUNTRY CODE>_<UNIQUE IDENTIFIER>

    e.g.:

    GRP:CEF_TACHOnet_AP_PROD_BE_001

    Email E = [email protected]
    Email 1 (SAN)Must be Empty
    Email 2 (SAN)Must be Empty
    Email 3 (SAN)Must be Empty
    AddressMust be Empty
    StreetMust be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
    Street no.Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
    Zip Code

    Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)

    Attention : if the ZIP code is NOT a 5-digit ZIP code, leave the ZIP code field empty and put the ZIP code in the City field.

    City

    Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)

    Attention : if the ZIP code is NOT a 5-digit ZIP code, leave the ZIP code field empty and put the ZIP code in the City field.

    Phone noMust be Empty
    Identification data

    The email address must be the same as the one used for registering the Unique Identifier.

    +

    Must be the name of the person representing the organisation. (Used for the Power of Attorney)

    + Commercial Register No (only mandatory for private organisations)

    Entered at the Local Court of (only required for German and Austrian private organisations)

    Revocation passwordMandatory field chosen by the requestor
    Revocation password repetitionMandatory field chosen by the requestor repeated

    Table 3. Complete details of each requested field

  4. (d)

    The selected key length shall be 2 048 (High Grade).

  5. (e)

    The Organisation shall record the reference number to retrieve the certificate.

  6. (f)

    The CEF Support Team shall check for new requests of certificates and verify if the information in the certificate request is valid, i.e. that it conforms to the naming convention specified in Appendix 5.1 Certificate Naming Convention.

  7. (g)

    The CEF Support Team shall verify that the information entered in the request is in a valid format.

  8. (h)

    When either check from points 5 or 6 above fails, the CEF Support Team shall send an email to the email address provided in the ‘Identification data’ of the request form, with the Domain Owner in cc, in which the Organisation is requested to start the process again. The failed certificate request shall be cancelled.

  9. (i)

    The CEF Support Team shall send an email to the Registration Authority about the validity of the request. The email shall include:

    1. (1)

      the name of the Organisation, available in the field ‘Organisation (O)’ of the certificate request;

    2. (2)

      the certificate data including the name of the AP for which the certificate is to be issued, available in the field ‘Last Name (CN)’ of the certificate request;

    3. (3)

      the certificate reference number;

    4. (4)

      the address of the Organisation, its email and the name of the person representing it.