DoD Seal DISA Seal JITC Seal
JITC PUBLIC KEY INFRASTRUCTURE (PKI)
DoD PKI COMBINED COMMUNICATIONS ELECTRONICS BOARD (CCEB) / PARTNER INTEROPERABILITY TESTING
Updated: 10/20/2017 11:43:24 AM
OVERVIEW

The Combined Communications-Electronics Board (CCEB) is a five-nation joint military communications-electronics (C-E) organization whose mission is the coordination of any military C-E matter that is referred to it by a member nation. The member nations of the CCEB are Australia, Canada, New Zealand, the United Kingdom and the United States of America. Secure information sharing between the Department of Defense (DoD) and its CCEB partners requires Public Key Infrastructure (PKI) interoperability. Like the DoD, many CCEB partners have implemented a PKI to secure their applications and networks. In the past, these countries' PKIs were designed to operate independently, but internal policies, technical challenges and vendor selection have all contributed to these different identity management and information protection solutions.

U.S. DoD CCEB Interoperability Root Certificate Authority (USDODCCEBRCA) has been implemented to synchronize identity management and information protection across the CCEB Partners. These initiatives aid the DoD and its CCEB partners in building PKI based solutions that interoperate moving forward.

As deployed PKIs transition to full compliance, the need to share information cannot wait. Legacy PKIs in the near term will have to interoperate with PKIs that fall in line with the Federal Bridge Certificate Authority (FBCA). The DoD is currently evaluating these external PKIs for implementation on DoD systems.

Department of Defense (DOD) Public Key Infrastructure (PKI) Combined Communications Electronic Board (CCEB) Partner PKI Interoperability Test Plan, version 1.0 specifies the process by which a CCEB PKI Partner can be approved to interoperate with the U.S. DoD PKI. Both Production and Non-production certificates were used in testing CCEB partner PKIs.

The interoperability testing phase of this process is conducted by the Joint Interoperability Test Command PKE Lab according to the Department of Defense (DOD) Public Key Infrastructure (PKI) Combined Communications Electronic Board (CCEB) Partner PKI Interoperability Test Plan, version 1.0. Three key trust models are tested:

CCEB PARTNER PKI TESTING STATUS

The following table contains information on CCEB Partner PKIs that have completed interoperability testing with the DoD PKI.

More detailed information can be found at http://iase.disa.mil/pki-pke/interoperability/index.html.


Test Status Color Codes
Not Tested
Test In Progress
Test Complete
Not Interoperable
Interoperable
This trust model was not tested.
Testing is in progress.
Testing is complete.
External PKI is non-interoperable

using this trust model.
External PKI is interoperable

using this trust model.


CCEB Partner PKI Root CA PKI Type Date Tested Direct Trust Model Cross Certified Trust Model
SHA-1 SHA-256 SHA-1 SHA-256
Australian Defence Organisation (ADO) ADOCA02 Non-Production (NIPRNet) 03/2013 Interoperable Not Tested Interoperable Not Tested
Australian Defence Organisation (ADO) ADOCA02 Production (NIPRNet) 06/2013 Interoperable Not Tested Interoperable Not Tested
Australian Defence Organisation (ADO) ADOCA02 Non-Production (SIPRNet) 03/2014 Interoperable Not Tested Interoperable Not Tested
Australian Defence Organisation (ADO) ADOCA05 Non-Production (SIPRNet) 06/2016 Not Tested Interoperable Not Tested Interoperable
Canada Department of National Defence (DND) DND sInteropCA-MDN Non-Production (SIPRNet) 11/2013 Interoperable Interoperable Interoperable Interoperable

Top of Page