← Atos cases
Bugzilla #1782092
Ca Certificate Root Program
Root Inclusion
Self Assessment
Cp Cps Document
Root Key Ceremony Evidence
Atos root inclusion request for four new trust roots
RESOLVED
FIXED
Atos
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Atos requested Mozilla add several new root certificates to the root store. Mozilla asked Atos to complete the required CCADB fields and submit a Compliance Self-Assessment, along with supporting CPS and key-generation evidence. Atos uploaded the self-assessment, CPS documents, sample S/MIME certificates, and auditor-witnessed key-generation reports. Mozilla later recommended approval for four Atos TrustedRoot root CA certificates, and Mozilla approved the request. The actual NSS changes were filed in a separate bug, #1833270.
Chronology
- Atos requested that several new roots be added for trust-store inclusion.
- Mozilla requested completion of CCADB NEED fields and a Compliance Self-Assessment.
- Atos uploaded its compliance self-assessment and CPS documents.
- Auditor-witnessed key-generation evidence was added for the Atos roots.
- Mozilla recommended approval of four Atos TrustedRoot root CA certificates.
- Mozilla approved the inclusion request and noted the NSS bug would handle the actual changes.
Thread Activity
- Mozilla representative — Ben Wilson said Atos had several new roots it was requesting be added and linked the CCADB case.
- Mozilla representative — He asked Atos to complete all CCADB NEED fields and upload a Compliance Self-Assessment to the bug.
- Atos — Atos uploaded the compliance self-assessment and CPS documents.
- Atos — Atos uploaded sample S/MIME certificates using ECC and RSA.
- Mozilla representative — Mozilla added auditor-witnessed key-generation reports for the Atos roots.
- Mozilla representative — Mozilla stated the CA application was in public discussion until March 20, 2023.
- Mozilla representative — Mozilla attached a reviewed compliance self-assessment spreadsheet.
- Atos — Atos said it would process Mozilla's remarks and respond after completion.
- Atos — Atos said it had updated its CP/CPS to version 2.7.3 and pointed to the download location.
- Mozilla representative — Mozilla recommended approval for four Atos TrustedRoot root CA certificates and linked the dev-security-policy discussion.
- Mozilla representative — Mozilla approved the request and said the NSS bug would be filed for the actual changes.
- Mozilla representative — She filed bug 1833270 against NSS for the actual changes.
Participants
Mozilla representative
Atos
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Add ACIN Global Trusted Sign root certificate
CERTISIGN ROOT CERTIFICATE AUTHORITY REQUEST
Add E-Tugra Root Certificates RSA v3 / ECC v3
Add Atos Trustcenter CA cert to trusted root CA cert list
Add Cybertrust Japan SecureSign Root CA16
Add GoDaddy and Starfield TLS R1 Root Certificates
Add SSL.com 2022 Client Root CA Certificates
Add HARICA 2021 SMIME Root CA Certificates to Mozilla Root store program