...
Cert Name | Description | Issuer | Private Key held by | CSR generated by | Certificate Generated by | Actions required by LFI | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
C1 | Identifies the TPP to OFP | OFTF | TPP | TPP | TPP | None | |||||||
S2 | Identifies non mtls OFP endpoints to TPP | Lets Encrypt | Ozone | NA | Ozone | None | |||||||
S1 | Identifies mtls OFP endpoints to TPP | OFTF | Ozone | Ozone | LFI | Yes | Ozone will provide a CSR and the LFI should use the OFTF to produce the certificate | ||||||
C4 | Identifies OFP to LFI’s Ozone Connect endpoint | OFTFOzone | Ozone | LFI | Yes | S4 | Identifies LFI’s Ozone Connect endpoint to Ozone | OFTF | LFI | LFI | LFI | Yes | Ozone will provide scripts to the LFI to assist with CSR generation if requested |
S3 | Identifies | OFTF | Ozone | Ozone | LFI | Yes | |||||||
C3S4 | Identifies LFI to the | OFTF | LFI | LFI | LFI | Yes | Ozone will provide scripts to the LFI to assist with CSR generation if requested The subject of the | certificte C3 certificate should be provided to Ozone. Ozone will limit access to | certifictes certificates issued by OFTF AND having that specific subject | ||||
C3 | Identifies LFI to the | OFTF | LFI | LFI | LFI | Yes |
| Drawio | ||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...