130 likes | 260 Views
IHEP Grid CA Status Report. F2F Meeting 20 Apr . 200 9. Gongxing Sun (sungx@ihep.ac.cn). Comput ing Cent re , IHEP,CAS,China. Outline. IHEP Grid CA Overview Current status Statistic. IHEP Introduction. IHEP——Institute of High Energy Physics, CAS,China
E N D
IHEP Grid CA Status Report F2F Meeting20 Apr. 2009 Gongxing Sun (sungx@ihep.ac.cn) Computing Centre, IHEP,CAS,China
Outline • IHEP Grid CA Overview • Current status • Statistic
IHEP Introduction • IHEP——Institute of High Energy Physics, CAS,China • The major institute conducts high energy physics experiments in China • Research fields Including HEP, cosmic ray, radiation, nuclear,theoretical physics, advanced accelerator technologies etc
IHEP Grid CA Introduction • IHEP CA is established in 2004 by IHEP Computing Center • IHEP CA is an accredited member of both EUGridPMA and APGridPMA. • Web site • https://gridca.ihep.ac.cn/ • CA certificate • https://gridca.ihep.ac.cn/cacert/index.html
IHEP Grid CA Introduction • Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei • Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN= host/voms.ihep.ac.cn • CRL Policy • https://gridca.ihep.ac.cn/crl/index.html • The lifetime of CRL is 30 days. • CRL is updated immediately after every revocation. • CRL is reissued 7 days before expiration even if there have been no revocation.
Current status of CA operation • Personal/Host/Service Certificate: Submit application form for the verification, and then complete the online form step by step. • Setup a special room as CA Room. One person hold the key of the CA room , and the other one hold the key of the CAComputer.
Current status of CA operation The following events have been recorded and archived: • Request for certificates • Issue certificates • Request for revocation • Issue CRLs • Login/Logout/Reboot event of the CA machine • All notifications are sent by the CA • Logs for data exchange between CA and RA • Archives are stored in a safe box, the offline media. Only RA and CA Operators can access the box.
Current status of CA operation • Current applications • EUChinaGrid Project • EGEE Project • LCG Project • CMS Project • ATLAS Project • BES Project
Authentication Accept request, communicate with CA Current status of CA operation • Staff structure Security Officer RA Operator CA Operator helpdesk Private key management Issue certificate
Statistic Number of issued certificates CooperationOrganizations Last update: Apr 15 15:14:47 2009 GMT
Update status • Due to the maintenance of the power supply of IHEP computing center, IHEP CA website had been unavailable from Nov/15/2008 07:00(CST) to Nov/17/2008 18:00(CST). • The new removable hard disk replaced the old one.
Thanks Thank you!