User:Martinlanghoff/Key Autonomy: OLPC PoV
Jump to navigation
Jump to search
Main options / variables
Activation keys, devkeys and OS/OFW/kernel images for 'emancipated' countries
Countries that have chosen to augment our keys need that we
- Stop issuing activation keys - this requires changes to act-server
- Stop issuing devkeys - this requires changes to act-server
- Stop signing OFW/kernel/etc
Handling of mfg-data
We need to still import mfg-data for support reasons, even if we turn activation.l.o "off" for other users. Being able to query the data is invaluable.
Helping deployments get started
- Run the key services @ OLPC, under a country-controlled DNS name.
- Run the key services @ a CoLo, under a country-controlled DNS name.
Key services
- antitheft URL
- OATC can direct clients to a 'local' upgrade server
- Mgmt UI and facilities
- URL for XSs downloading delegations
- Devkey request URL
- Activities URL