1. 1 SURFnet PKI efforts TERENA PKI-COORD meeting 6 December 2000 Ton Verschuren – Innovation Manager - SURFnet

2. 2 Operational X.509 PKI Service Since 1-1-2000 Root CA that certifies institutional CA’s –Tilburg University: 15 October 1999 –SURFnet Office: 17 November 1999 –University of Amsterdam: 17 December 1999 –University of Groningen: 20 January 2000 –SURFdiensten bv: 14 February 2000 –Delft University: 17 February 2000 –NHL: 13 September 2000

3. 3 CA hosting & licenses Hardware, software provided by SURFnet 2500 $ for 12 months (Xcert) Runs on x509.surfnet.nl (Solaris) Max. 100 certificates through CA-hosting Unlimited no. of certs if run locally

4. 4 Use of our CA hosting service 2000 SepOct Personal certs 0 0 Server certs 0 5 Code-sig certs 1 0 Cf. SURFnet Office: 45, 4, 0

5. 5 Stimulate use through… Distribution PCA and CA root certificates: –Web-site –Netscape pre config SURFkit v.3 –Directory server, cookbook http://ldap.gigacorp.nl/pkildap.html Service descriptions: PKI brochure Pilots: PKI smartcard Demo sites: WaardelozeCA, sslap, SKIN https://waardelozeCA.wind.surfnet.nl/ https://sslap.wind.surfnet.nl/ http://skin.surfnet.nl/

6. 6 Innovation IMAP/SSL, SMTP/SSL, SSL all with client authentication PKI smart cards & tokens Integration with LDAP

7. 7 Qualified Certificates? Early 2000: audit by TTP.NL November 2000: decision: No QC’s in the short term! Who needs a digital signature in our community?