The EU Grid PMA David Kelsey CCLRC/RAL 16 April 2004, Dublin

eIRG meeting, Dublin- 2 David Kelsey – The EU Grid PMA – 16 Apr 2004 The EU Grid PMA “Policy Management Authority”  Continues from the EDG CACG  Defines Minimum requirements and Best practices  Accredits Authorities  General authentication – not just PKI  Members  Accredited Authorities  Major relying parties (EGEE, DEISA, SEE-GRID, LCG,…)  TERENA (TACAR)  1 st meeting – April 2004 – Florence (INFN)  Charter approved  David Groep (NIKHEF) appointed as Chair

eIRG meeting, Dublin- 3 David Kelsey – The EU Grid PMA – 16 Apr 2004 EU Grid PMA coverage  Most countries in Europe have a national CA  “Catch-all” for EGEE (France) and SEE-GRID for S.East  Green: CA Accredited  Yellow: being discussed Other Accredited CAs:  DoEGrids (USA)  GridCanada  ASCCG (Taiwan)  ArmeSFO (Armenia)  CERN  Russia (LCG)  FNAL Service CA (USA)  Israel  Pakistan

eIRG meeting, Dublin- 4 David Kelsey – The EU Grid PMA – 16 Apr 2004 Authentication Policy Guidelines  Wherever possible  No more than one CA per country  Aim for widest possible cover  PMA does not provide identity assertions  Certificates issued meet or exceed the guidelines  Identity for Grid/eScience Authentication only  No support of data encryption or non- repudiation  No support for financial transactions  No liability!

eIRG meeting, Dublin- 5 David Kelsey – The EU Grid PMA – 16 Apr 2004 Policy Guidelines (2)  A single authoritative source for verifying roots of trust is needed (see TACAR)  We must work in the global arena (GGF & gridpma.org) gridpma.org  GSI imposes technical constraints which must be met  The PMA is mainly technical  Development needs technical experts

eIRG meeting, Dublin- 6 David Kelsey – The EU Grid PMA – 16 Apr 2004 Endorsement of the EUGridPMA The EU Grid Policy Management Authority (PMA) as a group of mutually trusted Certification Authorities (CAs), is instrumental for the security infrastructure of current GRID projects in the global arena. An endorsement by the eIRG of the EUGridPMA will be a concrete first step towards common EU polices for authentication for resource access and sharing for e-science.