RFC 4809:Requirements for an IPsec Certificate Man...
RFC-Ref

trust


Click on the red underlined text to get to the source

... Root CA/Trust Anchor A CA that is directly trusted by an end entity ...


... provision and life cycle management for such a PKC or its trust anchor PKC fall out of scope. ...


... integrity. The communication method MUST require that mutual trust be established between the PKI and the Admin (see Section 3.7.1). [R] transactions ...
... The complete hierarchical PKC chain (except the trust anchor) MUST be able to be searched in their respective repositories. The information to accomplish these searches MUST be adequately ...
... Trust ...
... Trust Anchor PKC Acquisition ...
... The Peer MAY have the ability to construct the certification path itself; however, Admin MUST be able to supply Peers with the trust anchor and any chaining PKCs necessary. The Admin MAY ensure the template uses the AIA ...


... Copyright (C) The IETF Trust (2007). This document is subject ...
... OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS ...



Google
Web
RFC-Ref