[Smcwg-public] Evidence and Enterprise RA

[Bruce Morton]

For authentication of individual identity, S/MIME BR 3.2.4 states:
The CA or RA SHALL collect and retain evidence supporting the following identity attributes for the Individual Applicant:

1.      Given name(s) and surname(s), which SHALL be current names;

2.      Pseudonym (if used);

3.      Title (if used);

4.      Address (if displayed in Subject); and

5.      Further information as needed to uniquely identify the Applicant

Should Enterprise RA be included, since we allow an Enterprise RA to verify this data and section 3.2.4.1 item 5 says "In the case of Sponsor-validated Certificates approved by an Enterprise RA, records maintained by the Enterprise RA SHALL be accepted as evidence of Individual identity."?


Thanks, Bruce.
Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20230505/22fa9659/attachment.html>