External Certificate Authority

Medium Hardware Assurance Identity Certificate Obligations

In order to request and use a Medium Token Assurance Identity Certificate issued under the ORC ECA CPS you (the subscriber) must make the request using a web browser and a FIPS 140-1/2 Level 2 token and agree to the following obligations.

To Order a Cryptographic Token please contact ORC at 1-800-816-5548 7:30 AM to 7:30 PM Eastern Standard Time or e-mail ecahelp@orc.com.

You can also come to our ORC Fairfax Office located at 11250 Waples Mill Rd, suite 210, South Tower to purchase your token.

	Subscribers shall use cryptographic tokens that have been verified to meet FIPS 140 Level 2 to receive a Medium Token Assurance certificate.
	To accurately represent yourself in all communications with ORC and the PKI.
	To protect the certificate private key from unauthorized access in accordance with the Private Key Protection section of the ORC ECA CPS.
	To immediately report to an RA or LRA and request certificate revocation if Private Key Compromise is suspected.
	To use the certificate only for authorized applications which have met the requirements of the US Government ECA CP and the ORC ECA CPS.
	To use the certificate only for the purpose for which it was issued, as indicated in the key usage extension.
	To report any changes to information contained in the certificate to the appropriate RA or LRA for certificate reissue processing.
	Abide by all the terms, conditions, and restrictions levied upon the use of private keys and certificates.

Theft, compromise or misuse of the private key may cause the Subscriber, Relying Party, and their organization legal consequences.

I understand that during this process I will be generating my key pair and will possess the only copy of my private key on the workstation/computer (or hardware token) from which I am making my request. If lost, damaged, or compromised, I will be responsible for requesting and incurring the costs of a new certificate.