Compromise and Disaster Recovery

If the private key of the DutchGrid medium-security Certification Authority is compromised or suspected to be compromised, the DutchGrid medium-security Certification Authority will

• inform subscribers, relevant relying parties and all cross-certifying CAs,
• terminate the certificate and CRL distribution for the certificates or CRL's issued using the compromised private key.

If a RA's private key is compromised or suspected to be compromised, the RA shall inform the DutchGrid medium-security Certification Authority and request revocation of the RA's certificate.

If an entities private key is compromised or suspected to be compromised, the entity or its administrator or responsible must request revocation of the certificate and inform any relevant relying parties.