21 Code For Federal Regulation Parts 1305, 1311 Page 61
ADVERTISEMENT
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67(4) An acknowledgment that the applicant has read and understands the Subscriber
Agreement and agrees to the statement of subscriber obligations that DEA provides.
(b) The applicant must provide the completed application to the registrant’s coordinator
for CSOS digital certificate holders who will review the application and submit the completed
application and accompanying documentation to the DEA Certification Authority.
(c) When the Certification Authority approves the application, it will send the applicant a
one-time use reference number and access code, via separate channels, and information on how
to use them. Using this information, the applicant must then electronically submit a request for
certification of the public digital signature key. After the request is approved, the Certification
Authority will provide the applicant with the signed public key certificate.
(d) Once the applicant has generated the key pair, the Certification Authority must prove
that the user has possession of the key. For public keys, the corresponding private key must be
used to sign the certificate request. Verification of the signature using the public key in the
request will serve as proof of possession of the private key.
§ 1311.30 Requirements for storing and using a private key for digitally signing orders.
(a) Only the certificate holder may access or use his or her digital certificate and private
key.
(b) The certificate holder must provide FIPS-approved secure storage for the private key.
(c) A certificate holder must ensure that no one else uses the private key. While the
private key is activated, the certificate holder must prevent unauthorized use of that private key.
(d) A certificate holder must not make back-up copies of the private key.
(e) The certificate holder must report the loss, theft, or compromise of the private key or
the password, via a revocation request, to the Certification Authority within 24 hours of
61
ADVERTISEMENT
0 votes
Related Articles
Related forms
Core Ct Coding For Leave Of Absence Under The Federal Family And Medical Leave Act (fmla) - State Of Connecticut Human Resources
Business
Standard Form 8 - Unemployment Compensation For Federal Employees (ucfe) Program Notice To Federal Employee About Unemployment Insurance
Legal
Form St-r-21 - Application For Sale/use Tax Exemption Certificate For An Incorporated Hospital
Legal
Form As 2645.1 - Application For Tax Exemption Under Section 1101.01 Of The Internal Revenue Code For A New Puerto Rico
Financial
Related Categories
Parent category: Legal