External Certificate Authority

Medium Hardware Assurance Identity Certificate Obligations

In order to request and use a Medium Hardware Assurance Identity Certificate issued under the ORC ECA CPS you (the subscriber)must make the request in the presence of an RA using a web browser and a FIPS 140-1/2 Level 2 token and agree to the following obligations.

To Order a Cryptographic Token and/or schedule a time to meet with an RA, please contact ORC at 1-800-816-5548 or 703-246-8536, 7:30 AM to 7:30 PM Eastern Standard Time or e-mail pkihelp@orc.com.

You can also come to our ORC Fairfax Office located at 11250 Waples Mill Rd, suite 210, South Tower to purchase your token, and request your Hardware Certificate in the presence of an RA.

	Subscribers shall use cryptographic tokens that have been verified to meet FIPS 140 Level 2 to receive a Medium Hardware Assurance certificate.
	To accurately represent yourself in all communications with ORC and the PKI.
	To protect the certificate private key from unauthorized access in accordance with the Private Key Protection section of the ORC ECA CPS.
	To immediately report to an RA or LRA and request certificate revocation if Private Key Compromise is suspected.
	To use the certificate only for authorized applications which have met the requirements of the US Government ECA CP and the ORC ECA CPS.
	To use the certificate only for the purpose for which it was issued, as indicated in the key usage extension.
	To report any changes to information contained in the certificate to the appropriate RA or LRA for certificate reissue processing.
	Abide by all the terms, conditions, and restrictions levied upon the use of private keys and certificates.

Theft, compromise or misuse of the private key may cause the Subscriber, Relying Party, and their organization legal consequences.

I understand that during this process I will be generating my key pair and will possess the only copy of my private key on the workstation/computer (or hardware token) from which I am making my request. If lost, damaged, or compromised, I will be responsible for requesting and incurring the costs of a new certificate.