David Groep Nikhef Amsterdam PDP & Grid TERENA Certificate Service Certificates4All! David Groep standing in for Licia Florio, TERENA, using material from.

Slides:

Advertisements

Similar presentations

Joining eduroam Wireless Roaming for Education and Research.

Advertisements

Usage of PGP in TACAR 19th OGF Meeting Chapel Hill, USA February 1, 2007 Licia Florio Project Development Officer

Connect communicate collaborate Campus Best Practice (GN3/NA3/T4) and the Norwegian GigaCampus project Vidar Faltinsen, UNINETT Network Monitoring Workshop.

David Groep Nikhef Amsterdam PDP & Grid Ensuring Availability Security, Protection, Trust, walking the line between paranoia and laisser-faire in a highly.

TNC 2006, Catania TERENA Server Certificate Service SCS Towards the large-scale use of affordable popup-free server certificates for the European NRENs.

David Groep Nikhef Amsterdam PDP & Grid Evolving Assurance – IGTF LoA generalisation David Groep Interoperable Global Trust Federation IGTF Documents at.

A Grid certificate in 5 minutes large scale federated automated issuing of grid certificates Jan MeijerEGEE’ Sept 2009 Barcelona.

2006 © SWITCH Authentication and Authorization Infrastructures in e-Science (and the role of NRENs) Christoph Witzig SWITCH e-IRG, Helsinki, Oct 4, 2006.

EuroCAMP Ljubljana, 3-5 March 2006 TERENA Server Certificate Service Towards the large-scale use of affordable popup-free server certificates for the European.

INFSO-RI Enabling Grids for E-sciencE JRA3 2 nd EU Review Input David Groep NIKHEF.

NRENs supporting Grids using current Grid technology TERENA NREN-GRID Workshop Amsterdam Milan Sova CESNET.

Authentication Policy David Kelsey CCLRC/RAL 15 April 2004, Dublin

Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,

EU NREN PKI Jan MeijerAARnet PKI / Access Federations Strategy Workshop 10 February 2010 Sydney.

Webinar “Operating the TCS shared portals” for NREN admins TCS shared portal project a/TCS_Portal_project Jan Meijer.

David Groep Nikhef Amsterdam PDP & Grid In Grid We Trust New authentication mechanisms and their impact on trust relationships at the home organisation.

Connect communicate collaborate Campus Best Practices Gunnar Bøe, Section Manager, Campus Networks and Systems, UNINETT Skopje, 15 Sept

David Groep Nikhef Amsterdam PDP & Grid Differentiated and Collaborative Assurance profiling the identity management landscape for diversifying e-Infrastructure.

Middleware challenges to service providers, the Nordic view TERENA, Ingrid Melve, UNINETT.

AARC Overview Licia Florio, David Groep 21 Jan 2015 presented by David Groep, Nikhef.

TERENA Certificate Service (TCS) 9 June Slide 2 › Many NRENs had set-up a CA, but certificates issued were not trusted by web browsers (the ‘ pop-up.

Community Services WI TF-EMC2 VC Meeting 29 June, 2011 Licia Florio

John Dyer Business & Technology Strategist TERENA 10 February 2014 TF-MSP Meeting ACOnet, Vienna Aggregation of Demand Collaborative.

Federated Identity Management for HEP David Kelsey WLCG GDB 9 May 2012.

Networks ∙ Services ∙ People David Groep TCS TNC2015 Workshop TCS SAML demo background June 16, 2015 TCS PMA.

2005 © SWITCH Perspectives of Integrating AAI with Grid in EGEE-2 Christoph Witzig Amsterdam, October 17, 2005.

TERENA Updates TF-EMC2 Meeting Bologna 7-8 Nov 2011 Licia Florio

High-quality Internet for higher education and research AAI from the NREN perspective Schiphol, October 17, 2005

TERENA TF-EMC2 Workshop David Groep,

EGEE is proposed as a project funded by the European Union under contract IST EU eInfrastructure project initiatives FP6-EGEE Fabrizio Gagliardi.

Federated Access to US CyberInfrastructure Jim Basney CILogon This material is based upon work supported by the National Science.

EGEE-III INFSO-RI Enabling Grids for E-sciencE EGEE and gLite are registered trademarks David Kelsey RAL/STFC,

Claudio Allocchio TERENA Technical Programme - Update General Assembly, 21 October 2005, Budapest 1 TERENA Technical Programme Update Claudio Allocchio.

OGF22 25 th February 2008 OGF22 Demo Slides Prof. Richard O. Sinnott Technical Director, National e-Science Centre University of Glasgow, Scotland

EResearchers Requirements the IGTF model of interoperable global trust and with a view towards FIM4R AAI Workshop Presenter: David Groep, Nikhef.

Authentication and Authorisation for Research and Collaboration Licia Florio AARC Workshop The AARC Project Brussels, 26 October.

Federated Identity Management for HEP David Kelsey STFC – RAL Nijmegen workshop 22 June 2012.

NRENs, Grids and Integrated AAI In Search For the Utopian Solution Christos Kanellopoulos AUTH/GRNET October 17 th, 2005 skanct at physics.auth.gr 2nd.

Security Policy: From EGEE to EGI David Kelsey (STFC-RAL) 21 Sep 2009 EGEE’09, Barcelona david.kelsey at stfc.ac.uk.

Community PKIs Initiatives Updates TF-EMC2 Meeting Loughborough, UK 6-7 May, 2009 Licia Florio, TERENA

EGI-InSPIRE RI EGI EGI-InSPIRE RI Establishing Identity in EGI the authentication trust fabric of the IGTF and EUGridPMA.

WLCG Authentication & Authorisation LHCOPN/LHCONE Rome, 29 April 2014 David Kelsey STFC/RAL.

EGEE is a project funded by the European Union under contract IST EGEE Summary NA2 Partners April

Programme ›TERENA ›Overview of the middleware initiatives in the European Higher Education ›What is eduroam: the technology and how to set up eduroam ›eduroam-in-a-box:

EGI-InSPIRE RI EGI-InSPIRE EGI-InSPIRE RI Evolution of AAI for e- infrastructures Peter Solagna Senior Operations Manager.

TACAR Updates version David Groep, NIKHEF. 9 th EUGridPMA ‘RAL’ meeting – Jan David Groep – TACAR Aims  Trusted and.

David Groep Nikhef Amsterdam PDP & Grid Bring the WLCG federation Home Extending your trust options beyond bottom-up identity by collaborating with global.

Facing the challenge of relevance Erwin Bleumink 4 June 2013 TNC13.

European Grid Initiative AAI in EGI Status and Evolution Peter Solagna Senior Operations Manager

Authentication and Authorisation for Research and Collaboration Licia Florio REFEDS Meeting AARC and AARC2 Vienna, 1 st December.

TERENA Certificate Service (TCS) 2 August Slide 2 ›TCS is a competitively tendered bulk-buy contract between TERENA and Comodo Limited on behalf.

Licia Florio Poznan, 5 June SCS Proposal Investigates the possibility to set up a service that offers popup-free cheap server-certificates against.

EGEE-II INFSO-RI Enabling Grids for E-sciencE EGEE and gLite are registered trademarks Security aspects (based on Romain Wartel’s.

David Groep Nikhef Amsterdam PDP & Grid AARC Authentication and Authorisation for Research and Collaboration an impression of the road ahead.

Authentication and Authorisation for Research and Collaboration Licia Florio AARC CORBEL Workshop The AARC Project Paris, 31 May.

Designing Identity Federation Policy, the right way Marina Vermezović, Academic Network of Serbia TNC2013 conference 4 May 2013.

DutchGrid KNMI KUN Delft Leiden VU ASTRON WCW Utrecht Telin Amsterdam Many organizations in the Netherlands are very active in Grid usage and development,

EGI-InSPIRE RI EGI (IGTF Liaison Function) EGI-InSPIRE RI IGTF & EUGridPMA status update SHA-2 – and more (David Groep,

News from EUGridPMA EGI OMB, 22 Jan 2013 David Kelsey (STFC) Using notes from David Groep 22/01/20131EUGridPMA News.

Authentication and Authorisation for Research and Collaboration Taipei - Taiwan Mechanisms of Interfederation 13th March 2016 Alessandra.

TERENA Certificate Service (TCS) September SCS,TCS,TCS-II – the ten year road to simple unlimited certificates › Back in 2004 many NRENs had set-up.

IGTF in 10 years enabling the interoperable global trust federation Nikhef, Amsterdam supported the Dutch national e-Infrastructure funded and coordinated.

Bob Jones EGEE Technical Director

RCauth.eu CILogon-like service in EGI and the EOSC

Leveraging the IGTF authentication fabric for research

Leveraging the IGTF authentication fabric for research

Brian Gilmore University of Edinburgh

AAI For Researchers Licia Florio AARC Project Coordinator GÉANT DI4R

AARC Blueprint Architecture and Pilots

RCauth.eu CILogon-like service in EGI and the EOSC

Presentation transcript:

David Groep Nikhef Amsterdam PDP & Grid TERENA Certificate Service Certificates4All! David Groep standing in for Licia Florio, TERENA, using material from Jan Meijer, Kevin Meynell and others

David Groep Nikhef Amsterdam PDP & Grid NREN collaboration joint procurement & operation of x.509 certificate service Comodo current service provider recognised in all common browsers and accredited by the IGTF TCS in four lines

TERENA Certificate Service

TCS organisation TERENA contractual party, financial clearinghouse, contact conduit to Comodo TCS Representatives 1 per NREN, Formal decisions TCS RAs day to day operations TCS PMA responsible for policy Kent Engstrom, Jan Meijer, Kevin Meynell,, Teun Nijssen, Milan Sova NREN community various other tasks (portal software, etc.)

Participating NRENs CountryMember org.ServerCode SigningPersonal AustriaACOnetXXX BelgiumBELNETXXX CroatiaCARnetX Czech RepublicCESNETXX DenmarkUNI-CX FinlandCSCXX FranceRENATERXX GreeceGRNETXX HungaryHUNGARNETX IrelandHEAnetXX ItalyGARRX LithuaniaLITNETXX MaltaUoMX NetherlandsSURFnetXXX NorwayUNINETTXXX PolandPSNCXXX PortugalFCCNX SerbiaAMRESXX SloveniaARNESX SpainRedIRISXXX SwedenSUNETXXX UKJANETX 22714

Delegated Responsibilities

Built using contracts scales well to large numbers of organisations and users assurance requirements on subscribers ensure quality ID bound through legal contracts

David Groep Nikhef Amsterdam PDP & Grid Authenticating users via Subscriber and Federation National research-education federations provide the basis for authenticating users and obtaining key attributes including assurance level via service entitlements User’s home organisation NREN or Federation Operator

Deployment: centralised portal Denmark, France, Netherlands, Norway, Sweden, Finland (Czech Republic: dedicated portal) TERENA: financial clearing house UNINETT: project coordination SURFnet: portal operations Uses ‘Confusa’ software Portal up and running since October

Reach of the TCS Personal service TCS shared portal and Confusa: trustworthy credentials in 3 clicks and 2 minutes

David Groep Nikhef Amsterdam PDP & Grid TCS Server SSL most prevalent usage in 2010 more than tripled to certs TCS (eScience) Personal is taking off as well few thousand now, limited mainly by home organisation participation! Code-signing certs slowly growing but take much more effort to get... TCS Deployment

David Groep Nikhef Amsterdam PDP & Grid TCS Personal: global recognition

David Groep Nikhef Amsterdam PDP & Grid web-SSO federations have matured integration of ‘high-value grid’ & web federation now becomes reality... so from now on: TCS! Significant benefits for e-Infrastructure and far beyond Relying parties world-wide now can rely on trusted institutes that have signed up to the TCS