Salient Characteristics.docx

22 KB Posted

Attached to
TRADOC SSL Certificates
Solicitation number
PANMCC-25-P-0000017541
Issued by

About this file

Written by GovTribe AI ·

The provided document is a Salient Characteristics file detailing SSL Server Certificates for the Training and Doctrine Command (TRADOC). The document explains that SSL certificates serve two primary purposes: affirming server identity and establishing an encrypted communication channel between servers and clients. Per a DOD CIO ICAM memo, Non-Person Entry (NPE) Public Key Infrastructure certificates from Entrust will no longer be trusted by Google Chrome after November 24, 2024, and Mozilla browsers after November 30, 2024, necessitating a transition to alternative DOD-approved NPE PKI vendors like DigiCert.

The related federal contract opportunity (Solicitation Number PANMCC-25-P-0000017541) is a pre-solicitation for TRADOC SSL Certificates, specifically requiring: 252 Basic OV FQDN SAN certificates, 1 Basic OV Wildcard SAN certificate, and 1 Business Support Certificate-based certificate. The procurement is being conducted by the Department of the Army Materiel Command Mission and Installation Contracting Command at Fort Eustis. The solicitation emphasizes the need to replace Entrust-issued certificates with alternative vendor solutions, with DigiCert (Account Number 1741959) identified as a compliant provider for DOD website security requirements.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file
Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

What is an SSL Server Certificate?

A server security certificate or a web server certificate is what is more commonly known as an SSL certificate. An SSL server certificate serves two primary purposes:

· It affirms the identity of the server before authenticating it.

· It establishes an encrypted channel for communication between the server (the website) and the client (the end user’s browser that connects to it).

· Per DOD CIO ICAM memo Non-Person Entry (NPE) Public key Infrastructure certificates issued by Entrust for public facing DoD websites will no longer be trusted by the Google Chrome browser by default after11 Nov 24, and the Mozilla browser after 30 Nov 24.

· DoD Components are encouraged to transition to one of the other DoD-approved NPE PKI vendors as existing Entrust NPE PKI certificates expire. SSL vendor “DigiCert” will allow compliance with the DOD memo.

An SSL certificate is a digital file that consists of a public and private key pair. The private key is stored on the server, whereas the public key is bundled together with the certificate and is shared with the client during the SSL handshake. Once the certificate is installed on the webserver, it switches the protocol to HTTPS, and the secure padlock symbol appears on the site. Web server certificates help to maintain data confidentiality and data integrity.

SSL server certificates use standard encryption protocols, and when installed on a web server, they protect against an attacker listening in on the network and stealing sensitive information.

The Benefits of an SSL Server Certificate

· Data Privacy and Data Integrity. Data is encrypted as it travels over the wire so that it cannot be stolen or tampered. Even if attackers try a man in the middle attack, they will be left with garbled information in an unreadable form that cannot be decrypted without the private key.

· Assurance of Server Identity. SSL certificates affirm the identity of the server before authenticating it and assures that it is who it claims to be. Identity verification is a critical aspect of web security.

· Builds Customer Trust. The presence of a padlock on the address bar instills trust in customers. Besides, Google’s endeavor to flag all websites still running on HTTP necessitates installing an SSL/TLS certificate.

Types of SSL Server Certificates There are many types of SSL Server Certificates. In TRADOC we are using:

Standard: Each standard SSL certificate protects/secure one domain name.

Multi-domain (SAN): A multi-domain (SAN) certificate can protect/secure multiple domains. Each domain is specified in the certificate.

Wildcard: A wildcard certificate also protects/secures multiple domains, but it does not require specifying each domain in the certificate.

File details come from the government source that posted it. Updated .