Certification Form for CSPs Sun's JCE implements encryption using Cryptographic Service Providers (CSPs). Only CSPs signed by a trusted entity can be plugged into the JCE framework. You have indicated that you will be providing a CSP for JCE. Please read, sign, and return this form to: Sun Microsystems, Inc. International Trade Services/Export Compliance Attn: Encryption Export 10 Network Circle MS: UMPK10-144 Menlo Park, CA 94025 You can also fax paperwork to the follwing number, with the following headings: Fax #: 408-668-0918 Subject Line: CSR #___ Attention: Encryption Export Sun Microsystems, Inc. International Trade Services/Export Compliance Before you return this form, you must send, via email, a Certificate Signing Request (CSR) and contact information to javasoft-cert-request@sun.com, as noted in java.sun.com/j2se/1.4.2/docs/guide/security/jce/HowToImplAJCEProvider.html In response, you will receive a request number, also via email. You may then mail this form. Include the request number here: Request Number: ______________________________ Including the request number ensures this form can be matched to your email message. Overview Export controls on commercial encryption products are administered by the Bureau of Industry and Security (BIS) in the U.S. Department of Commerce. Rules governing exports of encryption are found in the Export Administration Regulations (EAR), 15 CFR Parts 730-774 which implements the Export Administration Act ("EAA" 50 U.S.C. App. 2401 et seq.). BIS requires that each entity exporting products be familiar with and comply with their affirmative obligations set forth in the Export Administration Regulations. Please note that the regulations are subject to change. We recommend that you obtain your own legal advice when attempting to export. In addition some countries may restrict certain levels of encryption imported into their country. We recommend consulting legal counsel in the appropriate country or the applicable governmental agencies in the particular country. If you developed your CSP inside the United States, and you want to export your CSP, it must be reviewed and approved for export by the Bureau of Industry and Security. If you developed your CSP outside the United States, then you may not have to submit your product for a technical review, but it may be subject to the requirements of the Export Administration Regulations. Certification I certify that I have read the above "Overview" and will comply with the Export Administration Regulations. I understand that any CSP developed in the United States may not be exported from the United States without prior approval by the US Government and that such approval is my responsibility. I further understand that any CSP developed outside the United States nevertheless may be subject to the Export Administration Regulations. Company: _______________________________________________ Address: _______________________________________________ Signature: ____________________________ Date: _______ Printed Name: ____________________________________ Title: ____________________________________________