1. draft-dploy-requirements-00 Overview: draft-dploy-requirements-00 Gregory M Lebovitz Gregory@netscreen.com pki4ipsec BOF

2. draft-dploy-requirements-00 What is Project Dploy? initiated by IPsec product developers (11 helped draft req’s doc); Consortium birthed to work better with PKI vendors to create interoperable tools to enable large- scale, PKI-enabled VPN deployments www.projectdploy.com Projectdploy@postal.icsalabs.com

3. draft-dploy-requirements-00 Dploy’s Output A business case document A thorough requirements document, with consensus of 11 IPsec vpn vendors.

4. draft-dploy-requirements-00 Requirements Document One Protocol for certificate management – CMC was chosen Certificate Authorization – Bulk authorizations Key generation and cert request construction Enrollment – Three methods, type Certificate renewals and changes

5. draft-dploy-requirements-00 … Req’s Document (cont…) Certificate profile for use in IPsec –Identity Usage –Chaining –Key/Extended Key usage –Pointer to revocation checking Finding Certs in Repositories Revocation Action/Checking/Status Info Statistics/Monitoring/Troubleshooting/Error handling Intra-IKE Considerations

6. draft-dploy-requirements-00 Status Nov 2001 – effort championed and began July 2002 – Requirements completed –Asked PKI vendors to review and begin heavy participation –Less than enthusiastic reply Effort stalled; specification effort never undertaken