Create EJBCA Enrollment Profile

RA create enrollment profile hat match the different types of end entity certificates with varying levels of assurance. The following table provides a brief description of the appropriate uses of each Certification Type.

Certification Type Level of trust Configuration

Class 1 Individual Certificate

Low

Provides the lowest degree of assurance concerning identity of the individual and is generally used only to provide data integrity to the information being signed. These certificates should only be used where the risk of malicious activity is low and if an authenticated transaction is not required.

Class 2 Individual Certificate

Medium

In contexts where there's a possibility of data compromise with moderate consequences, and where users are presumed to lack malicious intent.

Class 2 Organization Certificate

High

The subscriber is not a falsely created organization insofar as the records of the subscriber’s identity are maintained by reliable and independent third parties.

Strict verification and authentication by the CA, RA, its appointed AP or a reliable database is required for certificate issued in HSM or the PKI Tokens. Confirmation is based upon the official identification document issued by government agencies (e.g.: Company Commission of Malaysia). Additionally, wherever applicable a letter of authorization from the relevant agency that the certificate is to be used for shall be provided by the applicant. The Registration Officer must be convinced of the validity and legitimacy of the legal entity as claimed by the documentation produced. The reliability of the information is determined at the sole discretion of the CA, RAs or Sub CA or database owner.

Create the enrollment profile based on required registration details required are as follows:

1. Full Name

2. IC No

3. Company Name

4. Company Address

5. Company Tel & Fax No (if any)

6. Email Address (if any)