1. The Distribution Online Vending Pilot Project Demo Testing Certificate Management Kennedy P Subramoney 23 July 2004

2. Online Vending PKI

3. Certificate Authority Server A Certificate Authority Server will be setup. The CA server will: –Process certificate signing requests (CSR) from vending clients and vending servers. –It will sign, generate and distribute requested certificates.

4. Vending Server Generates a certificate signing request (CSR). Securely stores private key in HSM. Load CA certificate. Load Vending Client certificate.

5. Vending Client Generates a certificate signing request (CSR). Securely stores private key in Smart Card. Load CA certificate. Load Vending Server Certificate.

6. Vending Server Enrollment Process The vending server would generate a CSR and securely store the private key on HSM. The CSR would be forwarded to the Certificate Authority(CA). The CA would then generate the certificate and make it available to Vending Clients.

7. Vending Client Enrollment Process The vending client would generate a CSR and securely store the private key on smart card. The CSR would be forwarded to the Certificate Authority(CA). The CA would then generate the certificate and make it available to the Vending Server.

8. Note: This a process specified only to test the SSL technology implementation. It does not attempt to implement a secure PKI.