...
- Before T1. Prepare your implementation so that it will be able to entrust transactions/signatures using the new PKI infrastructure.
- Between T1 and T2 (and before C1). You will be issued a client certificate from the new PKI infrastructure. Replace the current client certificate with the new one. Remember to update all participants in your SMP with public part of the new certificate.
- After T2. Patch your implementation so it no longer entrusts transactions/signatures using the current (then old) PKI infrastructure.
...
Please refer to this matrix to identify which situation applies to you.
| Provider | In PROD before T1 | In TEST before T1 | In TEST after T1 | Enter TEST after T1 | Certificate expire before T2 | Certificate expire after T2 | Recommendation |
|---|---|---|---|---|---|---|---|
| AP/SMP | YES | - | - | - | YES | You will be prioritized in the process for being issued a NEWPKI certificate before T1. If you still believe you will not have time to install it before end of expiry of OLDPKI certificate then renew OLDPKI certificate and follow matching recommendation for that situation. | |
| AP/SMP | YES | - | - | - | YES | Before C1 you will have been issued a NEWPKI certificate. Make sure to implement this certificate into your platform before T2. | |
| AP/SMP | - | YES | - | - | If you complete your tests and become eligible for a PROD certificate before T1. You will be prioritized in the process for being issued a NEWPKI PROD certificate before T1. | ||
| AP/SMP | - | YES | - | - | If you complete your tests and become eligible for a PROD certificate before T2, you will be issued a NEWPKI PROD certificate. If you fail to complete your tests before T2, you will have to reapply for a NEWPKI TEST certificate. | ||
| AP/SMP | - | YES | - | - | You will use NEWPKI TEST certificate for your testing .You will be issued a NEWPKI PROD certificate when you complete tests and become eligible for a PROD certificate. | ||
* NEWPKI - Refers to the new PKI infrastructure that will become mandatory after T2. * OLDPKI - Refers to the current PKI infrastructure we are about to obsolete. | |||||||