50 likes | 202 Views
KEK GRID CA. Takashi Sasaki Computing Research Center KEK. Current status. No major problem Our CA operation is now based on CP/CPS Ver. 2.0 since April 8, 2008 o id : 0.2.440.200198.1.10.1.2.0 Reflected the previous external and internal review results
E N D
KEK GRID CA Takashi Sasaki Computing Research Center KEK
Current status • No major problem • Our CA operation is now based on CP/CPS Ver. 2.0 since April 8, 2008 • oid: 0.2.440.200198.1.10.1.2.0 • Reflected the previous external and internal review results • According to the IGTF audit guideline document • CP/CPS still in RFC2527 • Migration to RFC3647 is not yet planned
Issued certificates on Sep.16 2008 • User certificates • 96 valid certificates among 275 issued • expired: 8 ; revoked : 171 • Host certificates • 204 valid among issued • expired : 51 ; revoked : 322 • Total • 300 valid among 852 issued • expired : 59 ; revoked : 493
Next external review • The last review was done on April 13rd, 2007 • We are extremely busy on the replacement of the computer system and we want to postpone the next external review until the spring of 2009 • If this is not approved by APGRID-PMA, we will try to find a time • We need volunteers to be reviewers • AIST, NAREGI or someone else? • We will have an internal review before the external review
Spam filtering on the APGRID-PMA list • Now KEK is hosting the spam filtering for the APGRID-PMA mailing list • We are very happy if you think it is useful • In our operation experience of the hardware appliance used on this purpose, there is still possibility to reject the signal • You have to know the fact and be careful