...
4.2.8 Technical Environment
Scope:
Virginia Tech Certification authority infrastructure components (EJBCA, TAS), Shibboleth IdP, and the communication channels between these components
Gap Analysis:
No gaps were identified.
Management Assertion:
Virginia Tech's IdMS Operations are managed to resist various potential threats such as unauthorized intrusions and service disruptions that might result in false Assertions of Identity or other erroneous communications.
Evidence of Compliance:
Our Shibboleth IdP is configured in a high availability environment to minimize system failures, but the database is a single point of failure. Should a failure occur, the result should be unavailability, not an inaccurate assertion.
info coming soon
Did you use Alternative Means? If yes, describe briefly the process.
...