Silver Policy

Revision History:

  • 1.3.6.1.4.1.34998.1.1.13 (Nov 6 2018): Updates to address TAGPMA review: add support for standard IGTF Robot DNs (Section 3.1.1), require eduGAIN SFA/MFA authentication profile in combination with Cappuccino (Section 3.2), and archive snapshots of InCommon/eduGAIN metadata (Section 5.4.1).
  • 1.3.6.1.4.1.34998.1.1.12 (Oct 15 2018): Replaced references to InCommon Silver Identity Assurance Profile with references to REFEDS Assurance Framework’s Cappuccino Profile (Section 3.2). Allow identification and authentication of certificate applicants via eduGAIN (Section 3.2.2). Support Robot certificates (Section 3.1.1). Document use of OAuth for grid portals (Section 4.1.2). Add E-mail Protection to X509v3 Extended Key Usage certificate extension (Section 7.1.2).
  • 1.3.6.1.4.1.34998.1.1.11 (Dec 3 2014): Minor updates for InCommon Silver Identity Assurance Profile v1.1. Increase CRL validity period from two weeks to 30 days (Section 2.3). Added ORNL site information (Section 5.1).
  • 1.3.6.1.4.1.34998.1.1.10 (Feb 3 2011): Further clarify process for CA generation of subscriber private keys.
  • 1.3.6.1.4.1.34998.1.1.9 (Jan 12 2011): Allow CA generation of private keys (for TAGPMA discussion).
  • 1.3.6.1.4.1.34998.1.1.8 (Dec 14 2010): Added SHA-2 hash functions per NIST Policy.
  • 1.3.6.1.4.1.34998.1.1.7 (Oct 6 2010): Approved under the IGTF MICS Profile by TAGPMA vote on Oct 6 2010 in Lubbock, Texas.
  • 1.3.6.1.4.1.34998.1.1.6 (Oct 5 2010): Submitted to TAGPMA reviewers on Oct 5 2010. Modified to comply with MICS Profile instead of SLCS Profile (i.e., reverted to Version 4 content).
  • 1.3.6.1.4.1.34998.1.1.5 (Sep 28 2010): Submitted to TAGPMA reviewers on Sep 28 2010. Modified to comply with SLCS Profile instead of MICS Profile.
  • 1.3.6.1.4.1.34998.1.1.4 (Sep 13 2010): Submitted to TAGPMA reviewers on Sep 13 2010, addressing review comments received to-date.
  • 1.3.6.1.4.1.34998.1.1.3 (Jul 28 2010): Submitted to TAGPMA reviewers on Jul 28 2010, addressing review comments received to-date.
  • 1.3.6.1.4.1.34998.1.1.2 (Apr 2 2010): Submitted to TAGPMA reviewers on Apr 2 2010, addressing review comments received to-date.
  • 1.3.6.1.4.1.34998.1.1.1 (Jan 15 2010): Submitted to TAGPMA reviewers on Jan 15 2010.