Members Meeting June 27-29, 2000

1. Members Meeting June 27-29, 2000

2. Introduction to the PKI Forum • Announced Dec. 1999 by leading PKI vendors • Currently have 70+ member organizations • Members meet quarterly • March 6-8, 2000 Foster City, CA, USA • June 27-29, 2000 Dublin, IRELAND • September 12-14, 2000 Montreal, CANADA • December 5-7, 2000 Sydney, AUSTRALIA • Work items progressed through members’ only mailing lists and website

3. PKI Forum “The PKI Forum is an international, not-for-profit, multi-vendor and end-user alliance whose purpose is to accelerate the adoption and use of Public-Key Infrastructure (PKI). The PKI Forum advocates industry cooperation and market awareness to enable organizations to understand and exploit the value of PKI in their e-business applications.”

4. Lack of interoperability Lack of end-user awareness Legal issues inE-Commerce Lack of PKI-ready applications Lack of method to underwrite digital signatures Lack of standards on certificate revocation Complexity of large-scale deployments Cost of large-scale deployments Windows 2000 delays End-user delay for lack of skills, lack of ROI, performance/ease of use concerns, etc. PKI Market Inhibitors Source: Frost & Sullivan US Network Authentication Markets, 1/1999

5. PKI Forum Key Objectives • Accelerate the adoption and use of PKI as a critical enabler of e-business • Enhance the value of PKI for customers and business partners • Increase confidence in deployment of PKI by customers and independent software vendors (ISVs) • Accelerate revenue growth for PKI-based products and services

6. How is the PKI Forum Managed? • The PKI Forum is managed by its Members as an independent organization • Full time Executive Director • Seven member Executive Board • Administrative support services are provided by The Open Group • Internationally recognized • Vendor-neutral

7. Executive Team • Executive Board • Chair: John Sabo, IBM/Tivoli • Steve Kruse, Baltimore Technologies • Steve Lloyd, Entrust Technologies • Shanen Boettcher, Microsoft • Derek Brink, RSA Security Inc. • Michael Baum, VeriSign • Pat Richard, Xcert International • Executive Director – Lisa Pretty • Lpretty@pkiforum.org • +1 650 560 9931

8. PKI Forum Working Groups • Composed of two synergistic and complementary peer-level working groups • The Business Working Group • The Technical Working Group • The Technical Working Group will primarily be composed of technologists/implementers • Individual subgroups may be formed from time-to-time as needs dictate

9. Business Working Group • Business Working Group Co-chairs • Ray Wagner, Digital Medical Systems • Lisa Pretty, PKI Forum (Acting) • General Approach/Objectives • Seek input - understand and synthesize business needs supported by PKI • Actively address PKI issues and concerns including review and comment of policy and standards documents • Ensure strong linkages to Technical Working Group - input on profiles, business requirements, etc. • Outreach to external user community and other organizations working with PKI • Provide PKI educational materials

10. Technical Working Group • Technical Working Group Co-chairs • Mark Davis, IBM • Andrew Nash, RSA Security Inc. • General Approach/objectives • Interoperability is main focus • Demonstrate commitment to open PKI standards • Review and provide comments/recommendations for standards and technical documents • Publish business-driven interoperability profiles based on customers’ e-business needs • Host multi-vendor interoperability test programs • Facilitate deployment of products meetingthe interoperability profiles

11. Proposed Interoperability Goals • Certificate interoperability • PKI-to-PKI interoperability • Intra-domain, e.g., CA-RA, client-RA, etc. • Inter-domain, e.g., CA-CA • CRL interoperability • Directory-PKI interoperability • Certificate validation

12. How does the PKI Forum relate to Standards Bodies? • PKI Forum is not a standards body • PKI Forum will • Rely on open standards, such as PKIX, in developing profiles and testing products • Identify areas where standards may require greater specificity • Work closely with standards bodies to recommend necessary changes • Have liaison relationships with key PKI industry consortia – ICSA &TeleTrust

13. Baltimore Entrust Technologies IBM Microsoft RSA Chrysalis-ITS JAWS Technologies SynData Technologies VeriSign Inc. Xcert International Founding/Principal

14. Associate Members Aladdin Knowledge Systems, Arthur Andersen, AT&T, BT, Bull S.A., CardBase Technologies, Celo Communications, Certicom, CertifiedTime.com, Cisco Systems, Compaq, Cylink, De La Rue Interclear, Digital Signature Trust, Diversinet, Entegrity Solutions, Equifax Secure, Fannie Mae, First Access, Fujitsu, FundSERV, Gemplus, GlobalSign, Hewlett-Packard, Hitachi, iD2 Technologies, I.D. Certify, Indus River Networks, Intelispan, KPMG, LockStar, NEC, Netlexis, nCipher, Nortel Networks, Oracle, Phyve, PricewaterhouseCoopers, Rainbow Technologies, Royal Mail - Viacode, Schlumberger, SECUDE GmbH, Secure Computing, Siemens AG, Spyrus, SSE, Utimaco,Visa International, Who?Vision, Zaxus

15. Aditing & Liaison Members Allen & Overy, DataKey, Dreifus Associates, ICSA.net, Kaiser Permanente, Litronic, Logica, PrivacyX.com Solutions, SHYM Technology, STMicroelectronics, TeleTrusT, TrustCenter, ValiCert

16. New Membership Categories • Liaison • Don’t duplicate effort • Join with synergistic organizations • Reach additional markets (geo. + industry) • Government Council • Large end users • International representation • Special contract requirements

17. BWG – Anna-Livia Intro Recruiting Break (CardBASE) Membership Lunch (Xcert) Education Break (Celo) Marketing TWG – Trinity Intro Break (CardBASE) Application Interop Lunch (Xcert) CA-CA Interop CMP Interop Break (Celo) Interoperability WG Day 1 Reports from both groups – Anna-Livia

18. Jameson Distillery • “Shindig” Evening • Dinner, drinks, “craic” • Bus leaves at 6:40

19. www.pkiforum.org