Our SSL CA Configuration

[Ivan R. Judson]

We *could* consider reducing this by having the machine off net in something
like the printer room (we should all have keys for that) and thus reduce the
time (theoretically) by 4 minutes.

Collapsing machines (or putting the RA Server on the net) should
(theoretically) reduce the time to 3 or 5 minutes, depending on the first
step.

--Ivan

PS -- I don't know what my opinion is yet :-)

> 2 mins to approve the req and write to floppy
> 2 mins to walk to BMR to get floppy
> 2 mins to walk to the CA
> 2 mins to read the floppy data
> 2 mins to sign the CSR
> 2 mins to write the cert to floppy
> 2 mins to walk to BMR
> 2 mins to read the data off of floppy
> 1 mins to email cert approval
> 17 mins for full process