Deployed PKI in Higher Education An Overview. Goal Find Institutions that have end-user-focused PKI up and running, and document their experiences Some.

Slides:

Advertisements

Similar presentations

NIH-EDUCAUSE PKI Interoperability Project Electronic Grant Application With Multiple Digital Signatures Peter Alterman, Ph.D. Director of Operations Office.

Advertisements

May 06, 2002 Getting Started with Digital Certificates: Is PKI-Lite Real PKI? Internet2 Spring Meeting 2002 Wash, DC.

2014 Redrock Software Conference ADV – Advanced Preferences and Settings By Jonathan Smith.

Introduction to Parent Accounts from:

Introduction to Parent Accounts. Parent accounts on Edmodo are a great way to enable parents to stay up to date on their child’s classroom activities,

Kathy Benninger, Pittsburgh Supercomputing Center Workshop on the Development of a Next-Generation Cyberinfrastructure 1-Oct-2014 NSF Collaborative Research:

GridShib: Campus/Grid RBAC Integration GGF15 Workshop: Leveraging Site Infrastructure for Multi-Site Grids October 3th, 2005 Von Welch

CREN-Mellon conference, December 1, 2001 University of Texas PKI Status.

Identity Management Realities in Higher Education NET Quarterly Meeting January 12, 2005.

PKI in US Higher Education TAGPMA Meeting, March 2006 Rio De Janeiro, Brazil.

PKI Activities at Virginia January 2004 CSG Meeting Jim Jokl.

Dartmouth PKI Deployment Robert Brentrup PKI Summit July 14, 2004.

PKI Update. Topics Background: Why/Why Not, The Four Planes of PKI, Activities in Other Communities Technical activities update S/MIME Pilot prospects.

The PKI Lab at Dartmouth. Dartmouth PKI Lab R&D to make PKI a practical component of a campus network Multi-campus collaboration sponsored by the Mellon.

GGF15 Workshop MyProxy Integration with PubCookie Marty Humphrey*, Jim Jokl*, and Jim Basney** *Department of Computer Science, University of Virginia,

Introduction to PKI Mark Franklin September 10, 2003 Dartmouth College PKI Lab.

Filling the Gap Between Vendor & User Practice Denise Troll Covey Associate University Librarian, Carnegie Mellon DLF Forum, November 2002.

Signing and Encrypting With the Thawte Web of Trust CSU Professional Development Institute January 8, 2009 Steve Lovaas.

Identity Management and PKI Credentialing at UTHSC-H Bill Weems Academic Technology University of Texas Health Science Center at Houston.

PKI-Enabled Applications That work! Linda Pruss Office of Campus Information Security

CAMP - June 4-6, Copyright Statement Copyright Robert J. Brentrup and Mark J. Franklin This work is the intellectual property of the authors.

Julia Bauder, Grinnell College & Jenny Emanuel, University of Illinois Be Where our Faculty Are: Emerging Technology Use and Faculty Information Seeking.

9/20/2000www.cren.net1 Root Key Cutting and Ceremony at MIT 11/17/99.

Inside the PKI Framework: * Activating the Puzzle Pieces PKI Summit Snowmass August

Public Key Infrastructure from the Most Trusted Name in e-Security.

Web Application Authentication with PKI & Other Functions Bill Weems & Mark B. Jones Academic Technology University of Texas Health Science Center at Houston.

Virginia Tech Overview of Tech Secure Enterprise Technology Initiatives e-Provisioning Group Frank Galligan Fed/Ed.

NMI-EDIT Outreach: The first five years. Topics for Today  NMI-EDIT background  Activities  Outcomes  Resources.

EDUCAUSE PKI Working Group Where Are We and Where are We Going.

Best Practices in Deploying a PKI Solution BIEN Nguyen Thanh Product Consultant – M.Tech Vietnam

3 Nov 2003 A. Vandenberg © Second NMI Integration Testbed Workshop on Experiences in Middleware Deployment, Anaheim, CA 1 Shibboleth Pilot Local Authentication.

What is the NIH RePORTER? And How Will it Help My PI?

CREN Certificate Authority Project: Update from Georgia Tech Ron Hutchins 28 March 2000.

September 9, 2005 Washington, D.C. My.Medicare.gov - The Medicare Beneficiary Portal The Future of Beneficiary Self-Service.

1 PKI & USHER/HEBCA Fall 2005 Internet2 Member Meeting Jim Jokl September 21, 2005.

X.509/PKI There is progress.... Topics Why PKI? Why not PKI? The Four Stages of X.509/PKI Other sectors Federal Activities - fBCA, NIH Pilot, ACES, other.

External user invited This creates invitation in Access Request List Invitation sent to guest with invitation URL Guest clicks URL. Verification.

Help Yourself.  FAQ  Message Board  Bug Tracker  Call Tracking System  Web Site.

NSF Middleware Initiative Renee Woodten Frost Assistant Director, Middleware Initiatives Internet2 NSF Middleware Initiative.

NDSU Lunchbytes "Are They Really Who They Say They Are?" Digital or Electronic Signature Information Rick Johnson, Theresa Semmens, Lorna Olsen April 24,

FEDERATIONS Clair Goldsmith, Ph.D., Associate Vice Chancellor and CIO September 27,

John Douglass, Developer Ron Hutchins, Dir. Engineering Herbert Baines, Dir. InfoSec.

Internet2 Middleware PKI: Oy-vey! Michael R. Gettes Principal Technologist Georgetown University

3 Nov 2003 A. Vandenberg © Second NMI Integration Testbed Workshop on Experiences in Middleware Deployment, Anaheim, CA 1 NMI R3 Enterprise Directory Components.

MARK B. JONES PKI DEPLOYMENT FORUM MADISON, WI APRIL 16 TH, 2008 Why do I need a Digital ID?

Internet 2 Weaving a Trust Fabric Shibboleth & PKI Spring 2003 Barry R Ribbeck University of Texas Health Science Center at.

GRIDS Center Middleware Overview Sandra Redman Information Technology and Systems Center and Information Technology Research Center National Space Science.

Leveraging Campus Authentication for Grid Scalability Jim Jokl Marty Humphrey University of Virginia Internet2 Meeting April 2004.

Digital Diversity: Multi- institutional Access to Distributed Course Resources Barry Ribbeck UT HSC - Houston.

PKI Session Overview 1:30 pm edt - Welcome, etiquette, session outline 1:40 pm edt - HEPKI-TAG Update (Jim Jokl, Virginia) 2:00 pm edt - HEPKI-PAG Update.

Higher Ed Certificate Authority by CREN: Update CSG February 2, 2000.

Shibboleth & Federated Identity A Change of Mindset University of Texas Health Science Center at Houston Barry Ribbeck

Day 3 Roadmap and PKI Update. When do we get to go home? Report from the BoFs CAMP assessment, next steps PKI technical update Break Research Issues in.

Exploring Access to External Content Providers with Digital Certificates University of Chicago Team Charles Blair James Mouw.

Introduction to the PKI Issues at UW Madison Presented to ITC on Friday, 3/18/2005 Tom Jordan Systems Engineer,

The GRIDS Center, part of the NSF Middleware Initiative Grid Security Overview presented by Von Welch National Center for Supercomputing.

E-Reports Overview January 12, What are e-reports? 2. How do I get connected? 3. Application for E-report Access. 4. Accessing your E-Reports.

Blackboard Learning System r6 and Shibboleth Barry Ribbeck U.Texas Health Science Center at Houston Christopher Etesse Blackboard Inc.

Secure Enterprise Technology Initiatives e-Provisioning Group

Dartmouth College Status Report

Public Key Infrastructure from the Most Trusted Name in e-Security

Henry Neeman, University of Oklahoma

MyProxy Integration with PubCookie

Inter-institutional Trust Fabric Overview and Synergies

Overview of The U.T. System Identity Management Federation

Federated Environments and Incident Response: The Worst of Both Worlds

Federating and PKI: Case Studies Paul Hill, MIT

Campus Resource Scheduling & Event Management

TeraGrid Identity Federation Testbed Update I2MM April 25, 2007

Presentation transcript:

Deployed PKI in Higher Education An Overview

Goal Find Institutions that have end-user-focused PKI up and running, and document their experiences Some institutions are moving past “the issues”… “the issues” Who’s out there doing it? … to deploying PKI– Is it a Project? App-focused? Departmental? Campus- wide?

Known End-user Cert Deployments Dartmouth College Georgia Tech MIT University of Pittsburgh University of Texas Health Science Center, Houston University of Virginia … and others

Deployed End-user PKI-enabled Applications At GaTech, certs authenticate remote access users; required at GTRI At University of Pittsburgh, students purchase books and other resources on-line At Dartmouth, certs sign messages At MIT, certs authenticate remote users, permit access to restricted Web sites, etc. Stay Tuned – UT HSC, Houston

ETR – Extending the Reach NMI grant initiative via NSF 9 respondents Various levels of deployment, mostly LDAP, some Shib State- and region-wide (AL, IN, MI, NJ, VT, CalState, Great Plains) Proposals seek to expand infrastructure and other resources using NMI-based middleware

State-based PKI deployments … At the state level: Illinois – certs deployed to date (Nov. 2003), 2100 / month being sent out New Jersey – for state gov’t and business use, some 5K-6K deployed usw More information to come re: Arkansas Nebraska

Observations Despite “the issues”, PKI is being deployed to end-users in useful and functional ways Variety of applications – class registration and grades tracking, , VPN, e-store, et.al. The technology is enabling (multi-app, multi- fn) Addresses legislation requirements (e-sign, HIPAA, et.al.) Deployed user certs tend to be purchased from vendors (RSA, Thawte, VeriSign, et.al.)

Deployed PKI in Higher Education Thank You Nathan Faut