Second Annual Meeting of the Romanian Tier-2 Federation RomanianGRID CA STATUS 05.12.2008 Cosmin Nistor; Alexandru Bobe Romanian Space Agency (ROSA)

Slides:

Advertisements

Similar presentations

Experiences with Massive PKI Deployment and Usage Daniel Kouřil, Michal Procházka Masaryk University & CESNET Security and Protection of Information 2009.

Advertisements

Academia Sinica Grid Computing Certification Authority (ASGCCA) Jinny Chien.

1 WebTrust for Certification Authorities (CAs) Overview October 2011 WebTrust for Certification Authorities (CAs) Overview October 2011 Presentation based.

 A public-key infrastructure ( PKI ) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store,

HIT Standards Committee: Digital Certificate Trust – Policy Question for HIT Policy Committee March 29, 2011.

Resource PKI: Certificate Policy & Certification Practice Statement Dr. Stephen Kent Chief Scientist - Information Security.

1 REUNA Certificate Authority Juan Carlos Martínez REUNA Chile Rio de Janeiro,27/03/2006, F2F meeting, TAGPMA.

National Institute of Advanced Industrial Science and Technology Auditing, auditing template and experiences on being audited Yoshio Tanaka

NRENs supporting Grids using current Grid technology TERENA NREN-GRID Workshop Amsterdam Milan Sova CESNET.

E-Procurement: Digital Signatures and Role of Certifying Authorities Jagdeep S. Kochar CEO, (n)Code Solutions.

\ Grid Security and Authentication1. David Groep Physics Data Processing group Nikhef.

9/20/2000www.cren.net1 Root Key Cutting and Ceremony at MIT 11/17/99.

Agentia spatiala romana - romanian space agency GEO welcomes FP7 Constanta, Romania 15th September 2006 Dr. Florin Serban Romanian Space Agency.

NECTEC-GOC CA APGrid PMA face-to-face meeting. October, Sornthep Vannarat National Electronics and Computer Technology Center, Thailand.

NENA Development Conference | October 2014 | Orlando, Florida Security Certificates Between i3 ESInet’s and FE’s Nate Wilcox Emergicom, LLC Brian Rosen.

Current Status of the Grid Computing for Physics in Romania Horia Hulubei National Institute of R&D in Physics and Nuclear Engineering (IFIN-HH)

National Institute of Advanced Industrial Science and Technology Self-audit report of AIST GRID CA Yoshio Tanaka Information.

Public Key Infrastructure (X509 PKI) Presented by : Ali Fanian.

NAREGI CA Updates Kento Aida NAREGI CA/NII Kento Aida, National Institute of Informatics APGrid PMA meeting 04/20/2008.

DataGrid WP6 CA meeting, CERN, 12 December 2002 IISAS Certification Authority Jan Astalos Department of Parallel and Distributed Computing Institute of.

March 27, 2006TAGPMA - Rio de Janeiro1 Short Lived Credential Services Profile Tony J. Genovese The Americas Grid PMA DOEGridsATF/ESnet/LBNL.

National Institute of Advanced Industrial Science and Technology Brief status report of AIST GRID CA APGridPMA Singapore September 16 Yoshio.

NECTEC-GOC CA Self Audit 7 th APGrid PMA Face-to-Face meeting March 8 th, 2010 Large-Scale Simulation Research Laboratory Sornthep Vannarat Large-Scale.

IHEP Grid CA Status Report Gongxing Sun F2F Meeting 20 Apr Computing Centre, IHEP,CAS,China.

IHEP Grid CA Status Report Wei F2F Meeting 8 Mar Computing Centre, IHEP,CAS,China.

A Brief Overview of draft-ietf-sidr-cp-01.txt draft-ietf-sidr-cps-rirs-01.txt draft-ietf-sidr-cps-isp-00.txt Steve Kent BBN Technologies.

Public Key Infrastructure (X509 PKI) Presented by : Ali Fanian

IHEP Grid CA Status Report Gongxing Sun 5 th F2F Meeting 16 Sep Computer Center, IHEP,CAS,China.

Profile for Portal-based Credential Services (POCS) Yoshio Tanaka International Grid Trust Federation APGrid PMA AIST.

UNAMgrid Alejandro Núñez Sandoval Rio de Janeiro, Brazil, 03/27/06 F2F meeting, TAGPMA.

KISTI Grid CA Status Report Korea Institute of Science and Technology Information Sangwan Kim Jae-Hyuck Kwan

Sam Morrison APAC CA – APGridPMA - ISGC2010 APAC CA Self Audit and status update Sam Morrison ARCS.

HEPSYSMAN UCL, 26 Nov 2002Jens G Jensen, CLRC/RAL UK e-Science Certification Authority Status and Deployment.

OSG PKI Contingency and Recovery Plans Mine Altunay, Von Welch October 16, 2012.

KFKI RMKI CA Review EUGridPMA May 26-28, Copenhagen Szabolcs Hernáth MTA KFKI RMKI pki.kfki.hu.

IST E-infrastructure shared between Europe and Latin America ULAGrid Certification Authority Vanessa Hamar Universidad de Los.

Academia Sinica Grid Computing Certification Authority (ASGCCA) Jinny Chien.

Academia Sinica Grid Computing Certification Authority (ASGCCA) Jinny Chien April 20, th APGridPMA in Taipei.

NECTEC-GOC CA The 3 rd APGrid PMA face-to-face meeting. June, Suriya U-ruekolan National Electronics and Computer Technology Center, Thailand.

APGrid PMA face-to-face meeting, 9/16/2008 PRAGMA-UCSD CA Team Pacific Rim Application and Grid Middleware Assembly

SSH/SSL Attacks not on tests, just for fun. SSH/SSL Should Be Secure Cryptographic operations are secure SSL uses certificates to authenticate servers.

0 NAREGI CA Status Report APGrid F2F meeting in Singapore June 4, 2007 Rumiko Masuko.

EGEE-II INFSO-RI Enabling Grids for E-sciencE EGEE and gLite are registered trademarks NA2 in Romania SEE Federation Adrian Vataman.

KEK GRID CA Takashi Sasaki Computing Research Center KEK.

FP6−2004−Infrastructures−6-SSA E-infrastructure shared between Europe and Latin America The Latin American Catch-all Grid Certification.

NIIF CA Status Update and Self-Audit Results 15 th EUGridPMA meeting Nicosia Tamás Máray NIIF Institute.

Baltic Grid Certification Authority 15th EUGridPMA, January 28th 2009, Nicosia1 Self-audit Hardi Teder EENet.

TR-GRID CA Self-Auditing Results and Status Update EUGridPMA Meeting September 12-14, 2011 Marrakesh Feyza Eryol, Onur Temizsoylu TUBITAK-ULAKBIM

HKU Computer Centre Grid Certificate Authority Status Update Lilian Chan IT Services, The University of Hong Kong APGrid.

FP6−2004−Infrastructures−6-SSA [ Empowering e Science across the Mediterranean ] Rome, Tutorial for Certification Authority Managers,

BG.ACAD CA HTTP :// CA. ACAD. BG S ELF - AUDIT REPORT 2014 Vladimir Dimitrov IICT-BAS ( 32 nd EUGridPMA Meeting Poznan, 8-10.

QuoVadis accreditation with EuGridPMA Alessandro Usai

18 th EUGridPMA, Dublin / SRCE CA Self Audit SRCE CA Self Audit Emir Imamagić SRCE Croatia.

GRID-FR French CA Alice de Bignicourt.

NECTEC-GOC CA A Brief Status Report 13 th APGrid PMA Face-to-Face meeting March 24 th, 2014 Large-Scale Simulation Research Laboratory Information Communications.

Feyza Eryol TÜBİTAK ULAKBİM TR-GRID CA SELF-AUDIT & UPDATES.

Mihnea Dulea, IFIN-HH R-ECFA Meeting, National Physics Library IFIN-HH, Magurele Romanian participation in WLCG M. Dulea Elementary Particles.

EGI-InSPIRE RI EGI (IGTF Liaison Function) EGI-InSPIRE RI IGTF & EUGridPMA status update SHA-2 – and more (David Groep,

UGRID CA Self-audit report Sergii Stirenko 21 st EUGRIDPMA Meeting Utrecht 24 January 2011.

News from EUGridPMA EGI OMB, 22 Jan 2013 David Kelsey (STFC) Using notes from David Groep 22/01/20131EUGridPMA News.

Updates from the EUGridPMA David Groep, Oct 17 st, 2007.

29 th EUGridPMA meeting, September 2013, Bucharest AEGIS Certification Authority Dušan Radovanović University of Belgrade Computer Centre.

IHEP Grid CA Status Report F2F Meeting 17 Mar Computing Centre, IHEP,CAS,China.

PKGrid CA Self-Audit 2012 Adeel-ur-Rehman Mansoor Sheikh.

AEGIS Certification Authority

CompTIA Security+ Study Guide (SY0-501)

MaGrid CA Self audit and update

PKI (Public Key Infrastructure)

KISTI CA Report Status & Self-Audit

BG.ACAD CA Self-audit report 2018

Presentation transcript:

Second Annual Meeting of the Romanian Tier-2 Federation RomanianGRID CA STATUS Cosmin Nistor; Alexandru Bobe Romanian Space Agency (ROSA)

agentia spatiala romana - romanian space agency RomanianGRID CA RomanianGRID CA was established and is operated by the Romanian Space Agency (ROSA), a public institution supervised by the National Authority for Scientific Research – Ministry of Education and Research in Romania. Purpose: A top level Certification Authority to provide PKI services for the GRID activities of the Research and Academic communities in Romania

agentia spatiala romana - romanian space agency RomanianGRID CA The CP/CPS document describes the rules and procedures followed by the RomanianGRID CA for issuing certificates. It is structured in accordance with RFC Document name “RomanianGRID CA Certificate Policy and Certification Practice Statement” Version1.4 Document date23 September 2007 O.I.D

agentia spatiala romana - romanian space agency RomanianGRID CA RomanianGRID CA Status RomanianGRID CA reached the “Production” status on the 9 th of October 2007, when the CA was included in the IGTF Distribution of Authority Root Certificates

agentia spatiala romana - romanian space agency RomanianGRID CA EUGridPMA

agentia spatiala romana - romanian space agency RomanianGRID CA Facts and Figures after 1 Year

agentia spatiala romana - romanian space agency RomanianGRID CA IFIN-HH - Bucuresti ISS - Bucuresti UPB - Bucuresti ICI - Bucuresti UTC-N – Cluj-Napoca ROEDUNET-IASI - Iasi ITIM – Cluj-Napoca UVT - Timisoara UB - Bucuresti UCv - Craiova CSA-INCAS - Bucuresti INCDMF - Bucuresti Registration Authorities Nov 2007 – 6 Dec Registration Authorities Nov 2007 – 6 Dec

agentia spatiala romana - romanian space agency RomanianGRID CA Certificates Root certificate (CA certificate) validity: Saturday, September 30, :56:22 PM GMT+03:00 User / Server valid certificates Nov 2007: 24 / 32 (56) Dec 2008: 51 / 60 (111) Total certificates 111 valid / 15 revoked / 46 expired

agentia spatiala romana - romanian space agency RomanianGRID CA RAUser certsServer certs IFIN-HH138 ISS86 UPB59 ICI617 UTC-N116 ROEDUNET-IASI1 ITIM3 UVT5 UB33 UCv1 CSA-INCAS13 INCDMF ROSA2

agentia spatiala romana - romanian space agency RomanianGRID CA Incidents CVE vulnerability (May 2008) “OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-base operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.” All IGTF accredited CA run tests on their certificates. Fortunately RomanianGRID CA issued only 1 affected certificate. Action taken: certificate revocation

agentia spatiala romana - romanian space agency RomanianGRID CA Thank you