Top of Page

 1.1 Business Context

  1.1.1 Product Offering

1. What is Internal Credential Management (ICM)?
2. How soon can I get my ICM credentials?
3. What does ICM offer?
4. What is a CA?
5. Do I need an ICM certificate?
6. How do I get an ICM Certificate?
7. What can an ICM Certificate be used for?
8. Can I register/maintain my ICM credentials through a self-serve online application?
9. Who can I contact for more information on ICM?
10. Who can I contact if I already have ICM and want to purchase additional services from ITSB or receive additional information?

---

  1.1.2 Client Support

1. We are a new Department. How do we become an ICM client?
2. How can I find out who our Client Relationship Manager (CRM) is?
3. As a Department, what can we expect in lines of support?

---

  1.1.3 Communication

1. How will ICM communicate with clients?
2. Is there an escalation process in communicating incidents?

---

  1.1.4 Pricing

1. Why is an employee contribution model being introduced?
2. What is the 2008/2009 fiscal year price for the ICM service?
3. How will the ICM service be invoiced to client departments?
4. What is the impact of the annual $40.00 per employee pricing structure for client departments?
5. What factors could affect the cost of ICM in the future (after FY 2009/2010)?
6. What impact, if any, will other modules (e.g. Travel, Pay, etc.) have on the cost of ICM as new applications roll out?
7. If my organization/department already operates its own CA, is it subject to the ICM employee contribution?

Top of Page

 1.2 Operational Context

  1.2.1 Standard Processes

1. When an employee or LRA that holds PKI keys accepts employment in another Federal Government department, do the keys need to be revoked?
2. I have an employee that left the department and still has encrypted documents on his personal drive, can I decrypt these files?
3. Can I use my PKI Key to access my pay stub or pension statements on the web?
4. When I activate myKEY, where can I store the credential?
5. I received my PKI key over 36 months ago and it tells me that my profile has expired. Why is that?

---

  1.2.2 Key Management Centre

1. What is the Key Management Centre (KMC)?
2. What are the roles and responsibilities of the KMC?
3. What can the client expect as support from the KMC?
4. How do we contact the KMC?

---

  1.2.3 ICM PKI Support

1. How is the PKI supported?

Top of Page

 1.3 Local Registration Authority Context

  1.3 Local Registration Authority Context

1. What is an LRA ?
2. How do I find out if my organization already has an LRA ?
3. What are the duties of the LRA ?
4. How many LRA s should I have?
5. Where can I find the LRA training schedule?
6. When do I have to submit my LRA training request form?
7. What type of ID can I use to perform the identification and authentication of a subscriber?
8. What if I don't have an LRA in my department?

Top of Page

 1.4 Technical Context

  1.4.1 PKI Infrastructure

1. What is the policy regarding ICM key/certificate update and expiry?
2. Does the use of the unattended login-UAL (i.e. Server Login feature) affect key lifetimes or transition periods?
3. Is there a 30-day lockout period for ICM users? If so, does it apply to device/application certificates?
4. Can I export my ICM credentials into Microsoft CAPI?
5. What is the difference between a public and private key?
6. What is a digital certificate?
7. We are currently developing an application (non-web based) that will be using PKI. What are the steps that I should take to test this application with ICM?
8. How do I get Entrust products?
9. Can I reuse a previously owned token or smart card?

---

  1.4.2 Online Registration and Credential Administration (ORCA)

1. What is ORCA?
2. No matter what information I put into ORCA, I get an error that I cannot be identified. What should I do?
3. My Department is not setup to use ORCA, what should I do?
4. How is my personal information used?
5. How is my personal Information protected?
6. I have more than one GC email address. Which one do I use?
7. I already have an ICM PKI Key. Do I still register for myKEY?
8. Where do I find my Personal Record Identifier (PRI)?
9. I didn’t receive an email after step 1 of 2. What do I do?
10. I did not write down the Authorization Code and closed the session. What do I do?
11. How long are the Authorization Codes and Reference Numbers good for and what should I do if they expire?
12. The system won’t let me register because it says I am already registered. What do I do?
13. How do I print the user guide?

---

  1.4.3 myKEY

1. What is myKEY?
2. How do I get myKEY?
3. How does a non-GC employee (contractor) get myKEY?
4. How do I change my password?
5. Lost or Forgotten Password?
6. Lost or Need a myKEY?
7. What can I use myKEY for?
8. Does myKEY use session cookies?
9. Is the myKEY system safe?
10. I have changed my name. Is myKEY affected?
11. I have changed Departments. Do I register for a new myKEY?
12. I no longer use myKEY, what can I do?

---

  1.4.4 ORCA and myKEY LOGIN technical pre-requisites and Support tips

1. What is the Desktop Configuration needed or pre-requisite for ORCA and myKEY LOGIN?
2. What is a "Java Not Enabled" error?
3. How can I determine which Java Run-Time Environment version is installed on my PC?
4. How do I determine the Java Run-Time Environment is enabled on my PC?
5. What is a "JavaScript not Enabled" error?
6. How do I enable JavaScript in different browsers and operating systems?
7. How do I enable the Java Plug-in in different browser?
8. How do I allow or change the cookies settings in Internet Explorer?
9. How do I allow or change the cookies settings in Firefox?
10. How do I allow or change the cookies settings in Google Chrome?

Top of Page

 1.5 Security Context

  1.5 Security Context

1. I have suspicions that my PKI keys were compromised. What should I do?
2. What happens if your myKEY is lost?
3. I want to share my PKI keys/profile with my administrative assistant. Can I provide her with my use name and password?
4. Can I have more than one person share a token or smart card (cryptographic module)?