Update of APGridPMA APGridPMA Meeting Academia Sinica, Taiwan 22 March,
General Status Chair: Eric Yen (ASGCCA), Vice Chair: Yoshio Tanaka (AIST CA) Routine Gathering Spring: together with ISGC in ASGC, Taiwan Fall: collocate with related events, otherwise video conference is held instead By request: whenever there is any special issue Self-Auditing: every CA has to have self-audit report once every year Regional Catch-All CA: ASGCCA Due to limited human resources, most CAs invest more time on the operation technology than the policy 2
CACountryCore LibrarySHA-2 Status #User Cert #Host Cert AIST CA JP NAREGI CA APAC CA AU Only maintain CRL after Jun 2012 ASGC CA TW OpenSSL 1.0, OpenCAReady CNIC CA CN OpenSSL 0.98, OpenCAFeb SDG CA CN OpenSSL 0.98, OpenCAFeb HKU CA CN OpenSSL 0.98, OpenCAFeb IGCA IN OpenSSL, OpenCA IHEP CA CN OpenSSL 1.0, OpenCAFeb KEK CA JP NAREGI CA 2.4Jan KISTI CA KR OpenSSL 0.98, OpenCA43 MYIFAM MY OpenSSL 098, OpenCAMar NCHC CA TW OpenSSL 0.98, OpenCAFeb NECTEC CA TH OPenSSL 0.97, OpenCAFeb NAREGI CA JP NAREGI CA 2.4READY119 PRAGMA-UCSD US NAREGI CA 2.2.5Feb
CA Update Australia Australian Access Federation Inc. takes over the responsibility, aiming for a national authentication services (AusCert) operational in 2014 Re-tendering for commercial certificate services After June 2012, the APAC CA only maintain CRL From Jan 2013, the CA services are supported as ASGCCA RAs. 27 current RAs have been migrated. Japan HPCI (High Performance Computing Infrastructure) CA is operating since Sep Will be IGTF CA in AIST CA is converging to HPCI CA. Planned to be decommissioned after Jan and only minimal services are maintained in New Zealand: All RAs have been transferred to ASGCCA in
SHA-2 Migration Status All CA will have SHA-2 capability after March 2013 SHA-2 EECs could be issued on request CAs may publish SHA-2 CRLs at separate distribution end point Only SHA-2 CRL is allowed from 1 Sep No SHA-1 end entity certificate will be issued after September 2013 Once SHA-1 is broken, the SHA-1 EECs should be revoked after March Status of middleware and application readiness should be updated and shared 5
Next APGridPMA Meeting in 2013 Next F2F Meeting: Fall 2013 Suggestion and Volunteer Host are welcomed 6