HKU Computer Centre Grid Certificate Authority Status Update Lilian Chan IT Services, The University of Hong Kong APGrid PMA meeting, 22 nd March 2013

Operating Organization 2 The University of Hong Kong Examines subscriber’s information Approve CA and RA operator to operate affairs Examines subscriber’s information Approve CA and RA operator to operate affairs CA Manager Accept subscribing request Check subscribers’ information and approve them Accept subscribing request Check subscribers’ information and approve them RA Operator Operate and maintain the CA signing server and CA web server Manage CA private key and its copy Operate CA tasks: issue/revoke/rekey certificate and issue CRL Update CP/CPS, operation manuals and security documents Operate and maintain the CA signing server and CA web server Manage CA private key and its copy Operate CA tasks: issue/revoke/rekey certificate and issue CRL Update CP/CPS, operation manuals and security documents CA Operator Help users related to HKU Grid CA operation Helpdesk Kwan Wing Keung Ho Pui Tak Kwan Wing Keung NS Mok Lilian Chan Ho Pui Tak, Kwan Wing Keung, NS Mok, Lilian Chan HKU Grid CA operates since 2009 (will expire at 2029)

 Computer Centre is renamed as Information Technology Services since September  “HKU Computer Centre Grid Certificate Authority (HKU Grid CA)” keep unchanged. 3 The University of Hong Kong Service Centre renamed

Issued Certificates  User certificates  Valid: 4  Expired/Revoked: 12  Host certificates  Valid: 8  Expired/Revoked: 27 (by March 22, 2013) 4 The University of Hong Kong

SHA-2 Availability  OpenCA with OpenSSL  SHA-2 ready 5 The University of Hong Kong