1. Cornell University SSL Certificate Service TSP Forum April 19, 2006 Andrea Beesing

2. What is the service? On-site distribution of Geotrust 128-bit SSL server certificates for cornell.edu and nsdlib.org On-site distribution of Geotrust 128-bit SSL server certificates for cornell.edu and nsdlib.org CIT-subsidized subject to annual review CIT-subsidized subject to annual review Self-service model with backline consulting when needed Self-service model with backline consulting when needed Information and order form at: Information and order form at:http://www.cit.cornell.edu/services/identity/sslcert/

3. Factors driving use of SSL Users are required to authenticate to access the service Users are required to authenticate to access the service The service either displays or asks the user to provide information The service either displays or asks the user to provide information Protected by federal or state legislation Protected by federal or state legislation Considered sensitive or confidential Considered sensitive or confidential When the ability to confirm the authenticity of the server is a requirement When the ability to confirm the authenticity of the server is a requirement

4. Why offer the service? CCD request when Identity Management program first established CCD request when Identity Management program first established More recently, focus on data security in a highly decentralized environment More recently, focus on data security in a highly decentralized environment Customer convenience and cost-saving for Cornell overall Customer convenience and cost-saving for Cornell overall

5. Why Geotrust? Survey of campus net admins to start Survey of campus net admins to start RFP issued to five vendors: Verisign, Geotrust, Entrust, Thawte, Commodo RFP issued to five vendors: Verisign, Geotrust, Entrust, Thawte, Commodo CIT team reviewed responses and submitted follow-up questions CIT team reviewed responses and submitted follow-up questions Geotrust selected Geotrust selected Price Price Browser support Browser support Responsiveness Responsiveness Interest in higher education market Interest in higher education market

6. Other things you should know Knowledge of application, access to tools for generating CSR generally assumed Knowledge of application, access to tools for generating CSR generally assumed Geotrust certificates are recognized by all major browsers BUT Geotrust certificates are recognized by all major browsers BUT Geotrust certificates may not be recognized by all the applications you manage Geotrust certificates may not be recognized by all the applications you manage Check compatibility at: Check compatibility at: http://www.geotrust.com/resources/compatibility_listing/ssl.asp http://www.geotrust.com/resources/compatibility_listing/ssl.asp or check with us http://www.geotrust.com/resources/compatibility_listing/ssl.asp

7. Additional information Identity Management main web site: Identity Management main web site: http://www.cit.cornell.edu/services/identity/ Identity Management developer site: Identity Management developer site: http://aads.cit.cornell.edu/ Geotrust site: Geotrust site: http://www.geotrust.com/ Backline support: Backline support:sslcert-admin@cornell.edu