Certificate Authorities
Server Configuration
The following are the Certificate Authorities registered with the Austin Active Directory and the assocated test domains
| Server | Domain | CA Name | DFS Group | Hash | Status | Purpose | Public Server |
|---|---|---|---|---|---|---|---|
| ca-root-p01 | austin.utexas.edu | Austin-CA-2016-Prod | AUSTIN-PKI | SHA256 | Production | SHA2 certificates for prod | certificates.austin.utexas.edu |
| ca-root-q01 | cds.utexas.edu | Austin-CA-2016-Qual | CDS-PKI | SHA256 | Test | SHA2 certificates for qual | certificates.cds.utexas.edu |
| ca-root-t01 | adtest.utexas.edu | Austin-CA-2016-Test | ADTEST-PKI | SHA256 | Test | SHA2 certificates for test | certificates.adtest.utexas.edu |
| ca-root-q02 | adqual.utexas.edu | Austin-CA-2018-Qual | ADQUAL-PKI | SHA256 | Qual | SHA2 certificates for adqual | certificates.adqual.utexas.edu |
Retired Certificate Authorities
The following are the Certificate Authorities that are no longer in production use.
| Server | CA Name | DFS Group | Hash | Status | Purpose | Public Server |
|---|---|---|---|---|---|---|
| ca-ext-p01 | Austin External 2015 | n/a | SHA256 | Production (deprecated) | External SHA2 certificates | self |
| ca02 | austin.utexas.edu External Certificate Authority | n/a | SHA1 | Expired | External certificates | self |
| ca03 | Austin Root Certificate Authority | n/a | SHA1 | Production (deprecated) | Root certificate only | self |
| ca04 | Austin Subordinate Certificate Authority | n/a | SHA1 | Production (deprecated) | Issuer for normal certificates | self |
| ca05 | Austin Disk Certificate Authority | n/a | SHA1 | Production (deprecated) | Issuer for Austin Disk client certificates | self |
| ca06 | Austin External Certificate Authority | n/a | SHA1 | Production (deprecated) | External certificates | self |
Assigned Certificate Templates
| Server | Certificate Templates |
|---|---|
| ca-root-p01 | |
| ca-root-q01 | |
| ca-root-t01 |
Naming Conventions
Active (2020 to current)
Austin CAs should confirm to the following naming conventions:
Austin CA <environment> <year> (<version>)
- The environment should be set to Prod, Qual, Test
- The version should be populated when a new CA is required with the same year and function as an existing CA
- Examples:
- Austin-CA-Prod-2020
- Austin-CA-Qual-2020
- Austin-CA-Qual-2020-v2
Previous (prior to 2020)
Austin CAs should confirm to the following naming conventions:
Austin CA <year> <function> (<version>)
- The function should be set to Prod, Qual, Test, External, Disk
- The version should be populated when a new CA is required with the same year and function as an existing CA
- Examples:
- Austin-CA-2016-Prod
- Austin-CA-2016-External
- Austin-CA-2016-Disk
- Austin-CA-2016-Test
- Austin-CA-2016-Qual
- Austin-CA-2016-Qual-v2