<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Jeff Ward and the WebTrust Task Force considered all the comments received on the WT4CA v2.1 changes, and made some additional changes in Sec. 4.5 through 4.10. I attach a new version of Sec. 4 from Jeff in a track changes mode showing
all changes proposed from the current WT4CA v2.0 document. Please review and comment.
<o:p></o:p></p>
<p class="MsoNormal">As noted on our last call, please remember that the Illustrative Controls in the draft are not prescriptive on the CA or auditor, and that WT4CA requirements cover both public and private CAs (so not everything will apply to every CA).<o:p></o:p></p>
<p class="MsoNormal">I’d like to start the Ballot discussion period this week – <b>
<u>are there two endorsers for the ballot</u></b>?<o:p></o:p></p>
<p class="MsoNormal">*****<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b>BALLOT 211 – </b><strong><span style="font-family:"Calibri",sans-serif;color:black;background:white;font-weight:normal">Resolution of Approval for WTCA v2.1 Changes
</span></strong><b><o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b><u>Type of Ballot</u></b>: Resolution of Approval of Forum Members only, and not a
<span style="color:black;background:white">Draft Guideline Ballot or Final Maintenance Guideline Ballot</span>.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
The following motion has been proposed by Kirk Hall of Entrust Datacard and endorsed by the following CA/B Forum member representatives: XXXX and YYYY to introduce a Resolution of Approval for WebTrust for CAs v2.1 Changes, as described in the Ballot.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b><u>Purpose of Ballot</u></b>: The WebTrust Task Force (TF) is ready to adopt changes to WebTrust for CAs Sec. 4.5 on CA key archival and destruction and new sections 4.9 and 4.10 on CA key transportation and CA key migration, as it has been seeing a number
of open questions in those areas. However the Task Force does not ordinarily create draft requirements, but instead typically relies on requirements from other credible sources (such as ISO 21188 for the original WebTrust for CAs in 2000) and then creates
related audit criteria. The Task Force has not asked the Forum to add the Sec. 4.5-4.10 changes to the Baseline Requirements or adopt them in a new formal Forum requirements document, but would like the Forum to formally approve the new audit criteria in
a Forum Ballot. This Ballot was drafted in response.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;background:white">
<b><span lang="EN" style="color:black">--Motion Begins--</span></b><span lang="EN" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b>RESOLUTION OF APPROVAL<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
The Members of the CA/Browser Forum have reviewed the proposed changes to the language of Section 4.5 and the new language of Sections 4.9 and 4.10 in the draft Trust Service Principles and Criteria for Certification Authorities (also known as WebTrust for
CAs) version 2.1, and hereby APPROVE the changes and new language and recommend that they be ADOPTED by the WebTrust Task Force (as the language in these sections may be changed from time to time by the WebTrust Task Force in the future, in the Task Force’s
sole discretion) in the final version of WebTrust for CAs version 2.1 and subsequent versions.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b>--Motion Ends--<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<o:p> </o:p></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">BALLOT 211 –
<strong><span style="font-family:"Calibri",sans-serif;color:black;background:white;font-weight:normal">Resolution of Approval for WTCA v2.1 Changes</span></strong><strong><span style="font-family:"Calibri",sans-serif;color:black;background:white">
</span></strong><o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Start time (22:00 UTC)<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">End time (22:00 UTC)<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Discussion (7 to 14 calendar days)<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">[date]<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">[date]<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Vote for approval (7 calendar days)<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">[date]<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">[date]<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">If vote approves ballot: Review Period – Not applicable.<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>