Address the distinction between Federal department and agency PKIs that are cross-certified with the Federal PKI and those that are operated under the Common Policy itself about fips201 HOT 7 CLOSED

Propose team discussion. See also #242

from fips201.

See text in 5.4 Line 2111 (from #242)

from fips201.

Review the proposed text for Sections 5.2.1 and 5.4 with FPKI.

from fips201.

Per discussion with FPKI, this should be address in other ways than putting into the more restrictive standard. Options, for example are a PA policy memo, or possibly updating the certificate profiles to resolve the issue, and at the same time provide greater flexibility going forward.

Suggest to decline and close.

from fips201.

Hildy recommends change in resolution decision to partially accept

from fips201.

“Accepted cross-certified PKI with certificate mapping but this allowance is deprecated in this version of the Standard and subsequently removed in next version of Standard.

from fips201.

Partially Accept - It is acceptable to cross-certify PKI with certificate mapping but this allowance is deprecated in this version of the Standard and subsequently removed in next version of Standard.
Per discussion with FPKI, this should be address in other ways than putting into the more restrictive standard. Options, for example are a PA policy memo, or possibly updating the certificate profiles to resolve the issue, and at the same time provide greater flexibility going forward.

from fips201.