Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Summary

This document provides a breakdown of the work items in the “Gap Analysis” section of the community survey from the InCommon Certificate Service Review Working Group. Primarily, only those items receiving ‘high’ or ‘medium’ priority are listed, though there is a table that outlines those items with ‘low’ priority that are either done or are being pursued. The work items are categorized below by responsible party.

Subscriber Survey

The full report of the subscriber survey from the Certificate Service Review Work Group can be found here:

InCommon's Work Items

Medium Priority

 

Item

Status

Target

DCV documentation

 2018, Q2
Not yet started. Possible webinar topic/doc?

2017, Q4

EV documentation

Have started with new EV process at: https://spaces.internet2.edu/x/YAxhBg

Possible webinar topic/doc?

2017, Q3

InCommon Cert API

Currently awaiting prioritization/scheduling within TIER

TBD

High Priority

 

Item

Status

Target

FAQ doc RE: how to get support

(depends

waiting on

whether KB implemented and/or whether single POC implemented)2017

potential I2 KB system

2018, Q4

 

Comodo's Work Items

Medium Priority

 

Item

Status

Target

ACME Support

Comodo

is waiting on maturity of the spec.Pending discussions with Comodo

doesn’t support ACME at this time (business decision).

no longer in scope

SmartCard Certificates

DONE

2016

Improve support function for EV process

Ref. ‘anchor certs’ project

DONE

2017, Q3

?

Dedicated queue for InCommonDONE (new ccmvalidation@comodo.com, in addition to existing ccmsupport@comodo.com), need to publicizeQ4 2017

Allow wildcard in CN with SANs

In 5.6 rel; 1/2017 ?

Pending discussions with Comodo

(some software needs to see a wildcard in the CN of a wildcard cert, not as a SAN)

Comodo will document their known workaround for EZProxy, but is still investigating the feasibility of adding this feature.

TBD

Bulk certificate management (both API and CCM)

 

Pending discussions with Comodo

2017?
Comodo is discussing only bulk DCV at this time. No other bulk certificate management capabilities are being discussed or planned for either CCM or the API.

no longer in scope

Sync DCV expirations per-org

Done/coming soon?

Comodo has determined that this is not feasible at this time.

no longer in scope

 

High Priority

 

Item

Status

Target

Improve custom notifications (addl. fields, events, documentation)

 Pending discussions with Comodo

Verified that this was mis-labeled. It was flagged by the community survey review group as a 'nice to have' and never received additional detail.

insufficient clarity to proceed - no longer in scope.

Improve authentication options for API

 Pending discussions with Comodo

(passwordless)

DONE, documentation has been updated, need to publicize

Q3, 2017

Additional API fields/functions

(note: how does this work with the ‘InCommon Cert API’ item?) 

Pending discussions with Comodo

:

  • external requester
  • option to omit optional DN components (street, locality)

Will not be fixed; workarounds provided.

Workaround for 'external requester' is to call "updateRequesterExt" after the initial request by injecting the external requestor(s).

Workaround for omitting optional components is to create a separate DRAO with the exact field requirements desired.

DONE/Not-In-Scope

CM/CA Status Page

  DONE

2017

Release Roadmap

for support communications

Uncertain...

Pending discussions with Comodo

DONE, see here

Q3, 2017

 

Shared Work Items (both InCommon and Comodo)

Medium Priority

 

Item

Status

Target

Single Initial POC for support

Not currently feasible

 

CCM Training

 
in development

2017,

Q2

Q4

Support webinars

Need to identify topics - ideas:

  • DCV
  • EV
  • auto-install

ongoing

 

High P riorityPriority

 

Item

Status

Target

Stronger SLA

DONE

2016

SSO

In

development

testing

2017,

Q2

Q4

MFA

In

development

testing

2017,

Q2

Q4

Support KB, tailored for InCommon issues

Hope to use coming ServiceNow implementation at I2

Awaiting KB at Internet2, can discuss whether or not Comodo can provide this. This should be moved to the 2018 Work Plan.

2018,

Q1

Q4

 

Work Items Receiving “low” Priority (yet which are being implemented)

 

Item

Status

Local CA options

Pending feasibility?, legal, communications

Out of Scope. InCommon not offering service due to lack of demand.

AD Integration

Basic functionality DONE

Better integration of vulnerability scanner

DONE