PKI4IPsec:%20Management%20Profile%20Requirements

1
PKI4IPsec Management Profile Requirements

• Jim Schaad - Soaring Hawk
• (For Sean Turner IECA, Inc.)
• draft-ietf-pki4ipsec-mgmt-profile-rqts-03.txt

2
From Last Meeting

• Many editorial changes
• Removed
• Non-repudiation
• Community realm concept
• Update type field
• Manual approval option removed
• Replaced printable string with UTF8 in
  authorization token

3
Reorganization and Clean Up

• Duplicate text removed from introductory sections
  and other parts of the document.
• Reorganized sections so that there was a major
  section for each management function.
• Used same component figure for each
  section/option only changed interactions.
• Lots of paragraphs got moved around.
• Added section called Trust to deal with trust
  anchor acquisition, path validation, and
  revocation checking.
• Abstract corrected to indicate Admin-Peer
  transactions are within scope.

4
Architecture

• Some interactions missing in Architecture
• Added G and M interactions between PKI and
  Peer/Admin
• Added G, E, M, R transactions between
  Peer and Admin
• Renamed
• Management M to Lifecycle L
• Renewal (and changes) R to Repository Lookups
• Moved update, rekey, and renewal to L
• Moved Repository lookup to R

5
To Do

• Collect (will do during last comment period)
• Requirements in Annex.
• Operator Options in Annex.
• Stimulate people to read draft!
• That feeling is stimulation (or its a hang over
  from all the good French wine youve been
  drinking) trust me!

6
Questions/Comments

• Want to LC draft as soon as comments are received
  and addressed Chairs?
• Send comments to turners_at_ieca.com.