10th EUGridPMA Meeting graciously hosted by ULAKBIM Istanbul, TR

1
10th EUGridPMA Meetinggraciously hosted by
ULAKBIMIstanbul, TR
2
Welcome at theBogazici University, Faculty of
Engineering
Welcome from the Organisers
3
A historic moment

• 20th grid CA coordination meeting in Europe

From Kelsey, DP (David)Sent Monday, November
20, 2000 810 PM To Francois Etienne (E-mail)
'Kors Bos' Subject CA/Security contacts
(DataGrid) Dear Francois, Kors, I have had no
nominations for security contacts for the
meeting on "Certificates for Testbed0" for CNRS
or NIKHEF yet. Please let me know who I should
invite. Regards, Dave -------------------------
----------------------- Dr David Kelsey
Computing Resource Management Particle Physics
Department Rutherford Appleton Laboratory
Chilton, DIDCOT, OX11 0QX, UK e-mail
XXXXXXXXXX_at_XXXTel 44(0)1235 XXXXXX (direct)
Fax [phone] XXXXXX -----------------------
-------------------------
4
Still the same issues, but we have learnt much!
0. Aims of meeting. Agreement of agenda.
Notes/minutes? 1. Roundtable status report. 2.
Authentication vs Authorisation I see this to
be a major architectural decision. What
should the certificate verify? Just the identity
or also something about membership of
particular experiements? 3. How many CA's should
be used in the DataGrid testbed? 4. Does a
hierarchy add value? Should/can we sign
national certificates by a single HEP-root CA?
5. What is the scope of the certificates? 6.
Revoking certificates. 7. Naming. What
constraints are there on the name fields? 8.
What can we learn from other GRID projects or
other PKI initiatives? - input to Terena PKI
meeting (6th December)? 9. Procedures for
running CA's and issuing certificates. We need
to convince each other that our certificates can
be "trusted". 10. Other issues Period of
Validity (CA's, Servers, Users) Key lengths
User education Instructions for system managers
11. Who is doing authorisation if we don't? WP2?
12. Storage of certificates? LDAP?
agenda 1st EDG CACG meeting, December 2000
5
Teleconferencing capabilities

• VRVS room Plane, access code PMA2007
• H323 via the ESnet gateway (dial 88IGTF)
• Istanbul is at GMT3!!
• Aid remote participants upload your
  presentations
• http//www.eugridpma.org/agenda/fullAgenda.php?ida
  a063
• Password

6
Agenda Overview
MONDAY
TUESDAY
WEDNESDAY
0900
transport
Introduction Agenda
transport
hardware tokens

• Contentious Issues
• levels of assurance

Chair Election
AEGIS
robot cert progress
ROSA
Morocco
1SCPs Grid Cert Profile Signing Party/TACAR
RP Requirementharmonization
OCSP Update
1400
Update APGridPMA
CA Update
Future directions
Reserved
Update GridIreland
Profiles Overview MICS Profile
NTUU/KPI
1600
Meeting Planning
Auditing Guidelines Change Management
NIST PKI ConferenceHighlights reflections
transport
1730
19.30 Golden Age 1!
7
Tonight

• Meet at 19.30 hrs at the Golden Age 1 hotel lobby
• For dinner
• "Degüstasyon" at Istiklal-Taksim (close to the
  hotel) where there will be traditional Turkish
  food, drink and music!
• Note that google maps is updated also indicating
  the restaurant at local pages.

8
Round of Welcome and Introduction
9
Minutes from the Last Meeting

• Thanks to Mike Helm, Emir Imamagic
• Comments and modifications?
• New volunteers for this time?
• Agenda bashing

10
EUGridPMA members and applicants

• Green EMEA countries with an Accredited
  Authority
• 24 of 27 EU member states (all except LU, MT, RO)
• AM, CH, HR, IL, IS, NO, PK, RU, TR
• Other Accredited Authorities
• DoEGrids (.us), GridCanada (.ca), CERN, SEE
  catch-all

Will be updated in this meeting?
11
The story so far
12
Membership by type

• Under Classic X.509 secured infrastructure
  authorities
• accredited 39 (recent additions BG.ACAD)
• active applicants 5 (Serbia, Romania,
  Morocco, Ukraine, Macedonia)
• Under SLCS
• accredited 1 (SWITCH-aai)
• active applicants 0
• Under MICS draft
• none yet of course
• Major relying parties
• EGEE, DEISA, SEE-GRID, LCG, TERENA

13
IGTF Global Status per December 2006
14
TAGPMA Status and Updates
New Chair Vinod Rebello, UFF, Brazil New
Vice-Chair Jim Marsteller, PSC, USA New
Secretary Marg Murray, TACC, TX, USA
information from Darcy Quesnel and Alan Sill
15
TAGPMA Status and Updates

• Currently Operating CAs
• DoEGrids
• GridCanada
• BRGrid (Brazil)
• Recently passed (now completing operational
  review)
• EELA Catch-All
• TACC Root and Classic (TX, USA)
• REUNA (Chile)
• Venezuela
• Mexico

information from Darcy Quesnel
16
Round Table Updates
17
(No Transcript)