pki4ipse-2----Page:11
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21 

Authorization Cancel
CMC Request/Response Pair w/ new controls

Authorization is identify by token
allow for bulk revoke or just singles?

May be signed by admin (SignedData) or use MAC by passphrase possessor (AuthData)

Race conditions between issuing a cert and cancel
Cancel of an issued Certificate

return either success or consumed (with cert identifier)

Query if authorization is still current?
PPT Version