MP261 Extending the Organisation Certificate Validity Period
Proposer
Bradley Baker (DCC)
Lead Analyst
SEC Change
Date raised
14/12/2023
Stage
Implemented
Implementation date
29/02/2024 (Feb 24 SEC Release)
Latest update
This modification was implemented in the February 2024 SEC Release (29 February 2024).
What is the issue?
The DCC would like to align the new manufacture Organisation Certificates with the existing Issuing Organisation Certification Authority (OCA) Certificate, which has an expiry date of 25 years (2041). The DCC is unable to do this currently as Appendix B ‘Organisation Certificate Policy’ only allows Organisation Certificates to be valid for 10 years.
What is the solution?
The Proposed Solution will allow the DCC to create Organisation Certificates for more than 10 years, where it is agreed by the Smart Metering Key Infrastructure Policy Management Authority (SMKI PMA), having first considered the views of the Security Sub-Committee (SSC). It will also allow the DCC to re-use the existing Public Key information.
Who is impacted?
Large Suppliers
Small Suppliers
DCC
Other SEC Parties
What SEC documents are affected?
Section L ‘SMKI and DCC Key Infrastructure (DCCKI)’
Appendix B ‘Organisation Certificate Policy’
This is the May 2024 SEC Modifications Working Group meeting, where we will be discussing: MP235 'Enhanced Meter Data Access for Other Users' Please see the meeting documentation here:
By subscribing you consent to receiving the SECAS newsletter.
Manage Cookie Consent
This website uses cookies. Please choose which categories of cookies you would like to enable.
Functional cookies
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
