Cross Certification Application Template

***Application for Cross Certification***

Please sign and mail the completed application in hardcopy to the [Chair
of the Federal Public Key Infrastructure Policy
Authority[^1]](http://www.cio.gov/fpkipa/drilldown_fpkipa.cfm?action=fpki_poc),
and send an electronic copy to <fpki.webmaster@gsa.gov>.

Organization Information

Organization Name:

Organization Address:

Contact Information

*Please p*rovide name and contact information for a primary and
alternate point of contact.

+-----------------------------------+-----------------------------------+
| **Primary POC**                   | **Alternate POC**                 |
|                                   |                                   |
| Name:                             | Name:                             |
|                                   |                                   |
| Title:                            | Title:                            |
|                                   |                                   |
| Email:                            | Email:                            |
|                                   |                                   |
| Phone:                            | Phone:                            |
|                                   |                                   |
| Address:                          | Address:                          |
+-----------------------------------+-----------------------------------+

PKI and Repository Information

*Please provide information about your PKI and repository. Note that the
PKI must be operational to cross-certify with the FBCA or C4CA. PKI
information must include the CA product(s) supported, the design of the
PKI (e.g., single CA, hierarchical with a Root, mesh), which CA within
the PKI will be designated as the Principal CA for cross-certification,
and whether the PKI has issued or has plans to issue cross certificates
with any other PKIs. Repository information must include the directory
product(s) used.*

Information on the Applicant's PKI Architecture

For applications involving interoperability at the "Basic," "Medium,"
"Medium Hardware," or "High" levels of assurance:

a\. Provide a list of those CAs under the Applicant's control which are
either subordinate to, or have any other trust relationship with, the
Applicant's Principal CA. If any of those CAs provides certificates
asserting object identifiers not covered in the attached CP, provide a
copy of the relevant CP under which those OIDs are defined.

b\. Provide a list of those CAs not under the Applicant's control which
have any trust relationship (e.g., cross-certificate) with the
Applicant's Principal CA or any CA under the Applicant's control that is
subordinate to, or has any other trust relationship with, the
Applicant's Principal CA.

c\. Briefly describe each application within the Applicant's
organization currently supported by the Applicant's PKI as encompassed
within the attached CP and CPS. This should include any CAs under the
control of the Applicant which are subordinate to or have any other
trust relationship with the Applicant's Principal CA.

d\. Attach a PKI architectural diagram, depicting the CA(s) that will be
cross-certified with the FBCA.

Information on Applicant's Directory Architecture

Describe the Applicant's directory structure and how the Applicant will
accomplish interoperability with the FBCA directory. For applications
involving interoperability at the "Basic," "Medium," "Medium Hardware,"
or "High" levels of assurance, describe how the Applicant will ensure
proper namespace control for distinguished naming.

Desired Federal PKI Cross Certification Level(s)

*Please c*heck all that apply.

  ---- ---------------------- ---- ----------------------------------------
       C4CA                        FBCA Medium Hardware

       FBCA Rudimentary            FBCA High (U.S. Federal entities only)

       FBCA Basic                  FBCA Medium Commercial Best Practices

       FBCA Medium                 FBCA Medium Hardware Commercial Best
                                   Practices
  ---- ---------------------- ---- ----------------------------------------

Statement of Mutual Interest (not required for U.S. federal entities or
state governments)

-   Please provide a brief statement describing why cross certification
    is in the interest of the Federal Government

U.S. Federal Entity Advocate (if available, not applicable for U.S.
federal entities)

*Please provide name and contact information of a U.S. federal entity
advocate if available. A federal advocate is not required for
consideration of the application, but will be contacted if provided to
provide additional evidence of mutual interest.*

Name:

Agency:

Title:

Email:

Phone:

Corporate Status (not required for government applicants)

*Please provide evidence of the corporate status of the entity
responsible for the PKI, and its financial capacity to manage the risks
associated with operating the PKI. The nature and sufficiency of the
corporate status and financial capacity will be determined at the
discretion of the FPKIPA on a case-by-case basis.*

Signature

*The application must be signed and dated by a senior official (an
officer or executive) of the organization operating the PKI.*

The above information is true and correct to the best of my knowledge
and belief.

Name:

Title:

Signature:

Date:

[^1]: See
    <http://www.cio.gov/fpkipa/drilldown_fpkipa.cfm?action=fpki_poc> for
    address information for the FPKIPA Chair