1. IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China

2. Outline IHEP Grid CA Overview Current status Statistic

3. IHEP Introduction IHEP——Institute of High Energy Physics, CAS,China The major institute conducts high energy physics experiments in China Research fields Including HEP, cosmic ray, radiation, nuclear,theoretical physics, advanced accelerator technologies etc

4. IHEP Grid CA Introduction IHEP CA is established in 2004 by IHEP Computing Center IHEP CA is an accredited member of both EUGridPMA and APGridPMA. Web site ▶ https://gridca.ihep.ac.cn/ https://gridca.ihep.ac.cn/ CA certificate ▶ https://gridca.ihep.ac.cn/cacert/index.h tml https://gridca.ihep.ac.cn/cacert/index.h tml

5. IHEP Grid CA Introduction ▶ Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei ▶ Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN= host/voms.ihep.ac.cn CRL Policy ▶ https://gridca.ihep.ac.cn/crl/index.html https://gridca.ihep.ac.cn/crl/index.html ▶ The lifetime of CRL is 30 days. ▶ CRL is updated immediately after every revocation. ▶ CRL is reissued 7 days before expiration even if there have been no revocation.

6. Current status of CA operation Personal/Host/Service Certificate: Submit application form for the verification, and then complete the online form step by step. Setup a special room as CA Room. One person hold the key of the CA room, and the other one hold the key of the CA Computer.

7. Current status of CA operation The following events have been recorded and archived: ▶ Request for certificates ▶ Issue certificates ▶ Request for revocation ▶ Issue CRLs ▶ Login/Logout/Reboot event of the CA machine ▶ All notifications are sent by the CA ▶ Logs for data exchange between CA and RA Archives are stored in a safe box, the offline media. Only RA and CA Operators can access the box.

8. Current status of CA operation Current applications ▶ EUChinaGrid Project ▶ EGEE Project ▶ LCG Project ▶ CMS Project ▶ ATLAS Project ▶ BES Project

9. Current status of CA operation Staff structure RA OperatorCA Operator Authentication Accept request, communicate with CA Issue certificate Private key management helpdesk Security Officer

10. Statistic Number of issued certificates Last update: Apr 15 15:14:47 2009 GMT User Certificate Host Certificate Service Certificate Total VALID 81940175 REVOKED 94841179 EXPIRED 1681766350 IHEPPKUHKUBUAANJNUCERNRSGS CNICTSINGHUACCNUSDUNNUNJUUSTC CooperationOrganizations Cooperation Organizations

11. Update status Due to the maintenance of the power supply of IHEP computing center, IHEP CA website had been unavailable from Nov/15/2008 07:00(CST) to Nov/17/2008 18:00(CST). The new removable hard disk replaced the old one.

12. Thanks Thank you!