1. Deployed PKI in Higher Education An Overview

2. Goal Find Institutions that have end-user-focused PKI up and running, and document their experiences Some institutions are moving past “the issues”… “the issues” Who’s out there doing it? … to deploying PKI– Is it a Project? App-focused? Departmental? Campus- wide?

3. Known End-user Cert Deployments Dartmouth College Georgia Tech MIT University of Pittsburgh University of Texas Health Science Center, Houston University of Virginia … and others

4. Deployed End-user PKI-enabled Applications At GaTech, certs authenticate remote access users; required at GTRI At University of Pittsburgh, students purchase books and other resources on-line At Dartmouth, certs sign e-mail messages At MIT, certs authenticate remote users, permit access to restricted Web sites, etc. Stay Tuned – UT HSC, Houston

5. ETR – Extending the Reach NMI grant initiative via NSF 9 respondents Various levels of deployment, mostly LDAP, some Shib State- and region-wide (AL, IN, MI, NJ, VT, CalState, Great Plains) Proposals seek to expand infrastructure and other resources using NMI-based middleware

6. State-based PKI deployments … At the state level: Illinois – 21000 certs deployed to date (Nov. 2003), 2100 / month being sent out New Jersey – for state gov’t and business use, some 5K-6K deployed usw More information to come re: Arkansas Nebraska

7. Observations Despite “the issues”, PKI is being deployed to end-users in useful and functional ways Variety of applications – class registration and grades tracking, e-mail, VPN, e-store, et.al. The technology is enabling (multi-app, multi- fn) Addresses legislation requirements (e-sign, HIPAA, et.al.) Deployed user certs tend to be purchased from vendors (RSA, Thawte, VeriSign, et.al.)

8. Deployed PKI in Higher Education Thank You Nathan Faut nfaut@educause.edu 301-335-2656