How to qualify a product (User Guide)

The DOME certification qualification process is one of the steps in the Product Specification process  and needs to be completed in the "Compliance profile " step".  The product needs to be created to be able to edit the compliance profile section.

In order to be able to get the DOME compliance profile the product owner needs to upload  the signed  self-attestattion and the additional certificates (if applicable)   to be included in the profile of the product offering. 

Once the certificates have been uploaded these need to be verified by the DOME operator, who will issue  the   Verified Credentials (VCs) with the information about the corresponding compliance leve reached by the product offering ( NOTE: The signature of the self-attestation is mandatory to get the Baseline compliance level in DOME). 

To get the VCs of the compliance level, DOME implements  a validation service that generates the VCs of the certificates by a DOME Trust Service Provider for Certification. 

 To do so the CSP needs to access the DOME compliance component  in the following link: XXXXX (currently an email needs to be sent to dome-certification@listas.tecnalia.com with the certificates )  to request the related validation of the information provided and get the VCC for the marketplace.  

Accessing the TSPC

1. Log in with DOME verified credentials in the TSPC

Requesting compliance verification to the TSPC

Once the user is logged in, a form is displayed to fill out the information about the product specification and to upload the self-attestation or the certificates

1. Cloud Service Provider pastes the link of the product offering of the marketplace and clicks on the “Autofill” button, product information will be automatically fetched from DOME marketplace. If the “Autofill” option is not clicked, the Cloud Service Provider should fill “Product Name”, “Product ID” and “Product Version” fields. 

2. Then, the CSP must select the product’s compliance level and provide evidence for each of the criteria. If the compliance level is the Baseline, the only requirement is to submit the signed self-attestation document.

3. Then click on “Submit” button

4. CSP will receive an email indicating that the process is in progress

Checking the status of the requests

After log in, CSP can check the status of all their requests clicking on Dashboard tab

Receiving the results of the validation

Once the validation process is finalised the CSP will get a notification through the email , and the compliance status is directly updated in the marketplace:

If the requested compliance level has not been acheived, the CSP will be requested to implement the corrective actions in the email.,