SUBTITLE A: REGULATION OF BUSINESS
CHAPTER I: DEPARTMENT OF CENTRAL MANAGEMENT SERVICES
PART 105 ELECTRONIC COMMERCE SECURITY ACT
SECTION 105.30 MAINTENANCE OF THE STATE CERTIFICATE POLICY AND CERTIFICATION PRACTICE STATEMENT
Section 105.30 Maintenance of the State Certificate Policy and Certification Practice Statement
a) Creation and Maintenance
CMS, with the advice of the PA, develops and maintains a Certificate Policy and a Certification Practice Statement indicating how that policy is going to be implemented. The purpose of these documents is to outline, within the broad parameters established by this Part, the specific details of the PKI. How changes are made in either document depends on whether CMS, with advice of the PA, determines the proposed changes are minor or major. This Part will be amended as prescribed by the Illinois Administrative Procedure Act [5 ILCS 100] to reflect any changes in the CP or CPS that also require changes in this underlying rule.
b) Minor Changes
Minor changes are those proposed changes to CP/CPS that, in the judgment of CMS, with the advice of the PA, will have no or minimal impact on subscribers or persons using certificates or lists of revoked certificates. Minor changes may be made without notice and with no change to CP or CPS version numbers.
c) Major Changes
Major changes are those proposed changes to CP/CPS that, in the judgment of CMS, with the advice of the PA, may have significant impact on subscribers or persons using certificates or lists of revoked certificates. Major changes shall be subject to a review and comment period of 60 days.
1) CMS and the PA shall review all comments and shall respond individually to the persons providing the comments.
2) After the 60-day review period is completed, CMS and the PA shall consider all comments received. CMS, with the advice of the PA, shall determine the new policies to be adopted, if any. New policies shall be incorporated in the CP or the CPS as appropriate, which shall be given new version numbers as appropriate. The new versions of the CP or the CPS shall be published on the CMS website, http://www.illinois.gov/pki/, and shall be made available in hard copy upon request.
3) In order to allow persons to modify their procedures as needed, all changes made under this subsection (c) shall become effective 30 days after the corresponding new versions of the CP and/or CPS are published on the CMS website. It shall be the responsibility of subscribers and other persons to periodically check the CMS website to determine if new versions of the CP and/or CPS have been published.
4) Use of or reliance upon a certificate more than 30 days after a new version of the CP and/or CPS has been published, regardless of when the certificate was issued, shall be deemed acceptance of the new policies reflected in the new versions of the CP and/or CPS.