15 th EUGridPMA Plenary Meeting Update from the TAGPMA Vinod Rebello Nicosia, Cyprus January 26 – 28, 2009 The Americas Grid Policy Management Authority

2 EUGridPMA F2F, Jan 09Vinod Rebello – Last TAGPMA F2F 8th TAGPMA F2F in La Plata City, Argentina November 6-8, attendees (2 from EUGridPMA) + 3 remotely + 1 (Jens) by proxy Preceded by UNLP Grid Open Day –Including talk from Argentinean Science Ministry.

3 EUGridPMA F2F, Jan 09Vinod Rebello – TAGPMA Membership CANARIE – Canada DOEGrids (ESNet) – USA EELA – International Fermi National Accelerator Laboratory - USA HEBCA/USHER/Dartmouth College – USA IBDS (ANSP) - Brazil WLCG – International NCSA – USA NERSC – USA Open Science Grid – International Purdue University – USA REUNA – Chile San Diego Supercomputer Center – USA SENAMHI – Peru TACC – USA TeraGrid – USA Texas High Energy Grid – USA University of Virginia – USA UFF – Brazil ULA – Venezuela UNAM – Mexico UNLP – Argentina IGTF Accredited CA Operators CA Accreditation in progress Interested in accreditation Relying Party

4 EUGridPMA F2F, Jan 09Vinod Rebello – TAGPMA CAs 22 Members –7(+2) IGTF Approved CAs 6 Classic, 2 SLCS, 1 MICS Venezuela, NERSC - new –3 CAs pending 1 Classic, 1 SLCS, 1MICS FNAL: CP/CPS approved, pending HSM installation –Plus 3 more in the works –6 Relying Parties Colombia expected to join soon

5 EUGridPMA F2F, Jan 09Vinod Rebello – TAGPMA Officers Election held in July of 2008 – 1 year term Chair –Vinod Rebello (UFF – Brazil) Vice-Chair –Jim Marstellar (PSC – USA) Secretary –Margaret Murray (UT-Austin – USA) Trusted Introducer (nominated) –Mike Helm (ESNet/LBL – USA)

6 EUGridPMA F2F, Jan 09Vinod Rebello – Administrative Changes CANARIE no longer hosting TAGPMA infra ESnet offered to stand in but undergoing services overhaul, i.e. some problems required ironing out tagpma-general, IGTF mailing lists are at ESnet TAGPMA twiki http(s)://tagpma.es.net/wikihttp(s)://tagpma.es.net/wiki –To host document history, tutorials etc. Web site –Public face of TAGPMA, more static information –Moved to PSC and extensive overhaul is planned –Also plan to mirror the Nagios CA monitoring and IGTF CA distribution, not necessarily at PSC tagpma-private mailing list hosted out of PSC

7 EUGridPMA F2F, Jan 09Vinod Rebello – Incident Response None of the Accredited CAs were affected by the Debian OpenSSL vulnerability (CVE ) However, there was significant fallout… –Patchy communications and delayed responses due in part to CA manager inexperience/turnover Poorly organized communication infrastructure Cleaned up existing mailing lists Setup alternative dedicated mailing list with out- of-band communication Secure private directory of membership with alternative contact information

8 EUGridPMA F2F, Jan 09Vinod Rebello – SLCS Profile Status SLCS Profile (Version 2.1.1, 15/01/2009). CRL requirement Includes comments from SWITCH Minor changes from previously approved version. On the wiki: SLCS Evaluation Spreadsheet [Thanks to Reimer and Shreyas] available on the TAGPMA wiki Review-2.1.xls Review-2.1.xls

9 EUGridPMA F2F, Jan 09Vinod Rebello – Classic Profile Classic Profile (Version 4.2, 8/10/2008). Approved by the TAGPMA at UNLP F2F Have some minor textual clarifications –Dinner conversation perhaps Updated Evaluation Spreadsheet. –Thanks to Reimer –I will makes some minor edits –Will add an updated operational review spreadsheet.

10 EUGridPMA F2F, Jan 09Vinod Rebello – MICS Profile To undergo language update to bring it in line with other profiles. Should be done by next TAGPMA F2F.

11 EUGridPMA F2F, Jan 09Vinod Rebello – Guides TAGPMA CA Accreditation process TACAR Registration Process (to be updated) Under development –How to setup an IGTF CA Beginners guide to …. Design decisions/options, OpenCA configuration etc. Contributions welcome!! –(IGTF) CA CP/CPS template: Minimum Requirements and Best Practices Current version in Portuguese Translation to include Classic and Grid Cert Profiles –Ready to start merging work with Jen's effort here

12 EUGridPMA F2F, Jan 09Vinod Rebello – CP/CPS doc based upon NIST SP Recommended Security Controls for Federal Information System NIST SP – Information Security Handbook: A Guide for Managers ISO/IEC Code of practice for information security management COBIT NIST SP – Building an Information Technology Security Awareness and Training Program NIST SP Computer Security Incident Handling Guide Building an Incident Response Program To Suit Your Business –

13 EUGridPMA F2F, Jan 09Vinod Rebello – GridCanada CA Officially member of the EUGridPMA. CANARIE to hand over/back management and operations of the Canadian Grid CA to NRC. Transition to take place over the next few months NRC then plan to update/upgrade software, policy etc.

14 EUGridPMA F2F, Jan 09Vinod Rebello – TAGPMA F2F Meetings 9th TAGPMA F2F to be held at PSC or Dartmouth College, USA –Week of April 27th, 2009 –Possibly preceded with one day workshop on Identity Federations Fortnightly Video Conference Call on Wednesdays. –Next one is February 4th, 11am CDT –Video arrangements: ESNet or GDS or phone #

15 EUGridPMA F2F, Jan 09Vinod Rebello – IGTF World Map I wanted to have a graphical map like DavidG´s for the TAGPMA Considering the whole world seemed just as much work …