Versions Compared

Version Old Version 20 New Version Current
Changes made by

Alex Barth

Alex Barth

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Current Certificate Authorities

The current Certificate Authorities

...

Server Configuration

The following are the Certificate Authorities registered with the Austin Active Directory and the assocated test domainsare the preferred CA for internal certificates in the respective environments:

Server

Domain

CA Name

DFS Group

Key Length

Hash

Purpose

Public URL

aad-cart-p01

n/a

Austin-CA-Root-2022

n/a

4096

SHA384

offline root CA for all issuing CAs

certificates.austin.utexas.edu

aad-case-p01

austin.utexas.edu

Austin-CA-Prod-2022

AAD-PKI

4096

SHA384

issuing CA for prod

certificates.austin.utexas.edu

aad-case-q01

adqual.utexas.edu

Austin-CA-Qual-2022

AAD-PKI

4096

SHA384

issuing CA for qual

certificates.adqual.utexas.edu

aad-case-t01

adtest.utexas.edu

Austin-CA-Test-2022

AAD-PKI

4096

SHA384

issuing CA for test

certificates.adtest.utexas.edu

Deprecated Certificate Authorities 

The deprecated Certificate Authorities are still active but no longer the preferred CA for the respective environment:

Server

Domain

CA Name

DFS Group

Key Length

Hash

Status

Purpose

Public

Server

URL

aad-ca

-root

-p01

austin.utexas.edu

Austin-CA-2016-Prod

AUSTIN-PKI

2048

SHA256

Production

SHA2 certificates for prod

certificates.austin.utexas.edu

aad-ca-

root-

q01

cds

adqual.utexas.edu

Austin-CA-

2016

2018-Qual

CDS

ADQUAL-PKI

2048

SHA256

Test

SHA2 certificates for qual

certificates.

cds

adqual.utexas.edu

aad-ca-

root-

t01

adtest.utexas.edu

Austin-CA-2016-Test

ADTEST-PKI

2048

SHA256

Test

SHA2 certificates for test

certificates.adtest.utexas.edu

aad-ca-

root-q02

c01

adqual

cds.utexas.edu

Austin-CA-

2018

2016-Qual

ADQUAL

CDS-PKI

2048

SHA256

Qual

SHA2 certificates for

adqual

legacy qual

certificates.

adqual

cds.utexas.edu

Retired Certificate Authorities 

The following are the retired Certificate Authorities that are no longer in production useactive and the associated CRLs cannot be accessed by clients.

...

Server

Domain

CA Name

DFS Group

Key Length

Hash

Status

Purpose

Public

Server

URL

ca-ext-p01

austin.utexas.edu

Austin External 2015

n/a

2048

SHA256

Production (deprecated)

External SHA2 certificates

self

ca02

austin.utexas.edu

austin.utexas.edu External Certificate Authority

n/a

2048

SHA1

Expired

External certificates

self

ca03

austin.utexas.edu

Austin Root Certificate Authority

n/a

2048

SHA1

Production (deprecated)

Root certificate only

self

ca04

austin.utexas.edu

Austin Subordinate Certificate Authority

n/a

2048

SHA1

Production (deprecated)

Issuer for normal certificates

self

ca05

austin.utexas.edu

Austin Disk Certificate Authority

n/a

2048

SHA1

Production (deprecated)

Issuer for Austin Disk client certificates

self

ca06

austin.utexas.edu

Austin External Certificate Authority

n/a

2048

SHA1

Production (deprecated)

External certificates

self

Assigned Certificate Templates

...

Naming Conventions

Active (2020 to current)

Austin CAs should confirm to the following naming conventions:

  • Austin CA <environment> <year>  (<version>)

  • The environment should be set to Prod, Qual, Test
  • The version should be populated when a new CA is required with the same year and function as an existing CA
  • Examples:
    • Austin-CA-Prod-2020
    • Austin-CA-Qual-2020
    • Austin-CA-Qual-2020-v2

Previous (prior to 2020)

Austin CAs should confirm to the following naming conventions:

...