Our SSL CA Configuration

[Ti Leggett]

That's true, but the printer room is much more accessible than say my
office. Also, you'd still have to walk to the BMR to get the disk from
the RA server and vice versa unless we also put the RA server in the
printer room as well. We could put the CA server in the BMR next to the
RA server but then you have to have keyboard/mouse/monitor in the BMR
somewhere and that that's cumbersome and takes up lots of rack space.

On Thu, 2003-05-08 at 11:12, Ivan R. Judson wrote:
> We *could* consider reducing this by having the machine off net in something
> like the printer room (we should all have keys for that) and thus reduce the
> time (theoretically) by 4 minutes.
> 
> Collapsing machines (or putting the RA Server on the net) should
> (theoretically) reduce the time to 3 or 5 minutes, depending on the first
> step.
> 
> --Ivan
> 
> PS -- I don't know what my opinion is yet :-)
> 
> > 2 mins to approve the req and write to floppy
> > 2 mins to walk to BMR to get floppy
> > 2 mins to walk to the CA
> > 2 mins to read the floppy data
> > 2 mins to sign the CSR
> > 2 mins to write the cert to floppy
> > 2 mins to walk to BMR
> > 2 mins to read the data off of floppy
> > 1 mins to email cert approval
> > 17 mins for full process
>