Feyza Eryol TÜBİTAK ULAKBİM TR-GRID CA SELF-AUDIT & UPDATES

Overview  General Information  Statistics  Self-Auditing Report  Policy Updates Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia

General Information  Accredited in September  Single CA in Turkey for academic field.  It provides X509 certificates for academic research and educational activities in Turkey.  Managed by TÜBİTAK ULAKBİM   CP/CPS:  Follows RFC3647  Current version 2.3 since May, 2014 (We did not present the self-audit but we changed CP/CPS according to periodic self-audit results.) Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia

Statistics  Certificates  Number  Valid  Expired  Revoked Users Servers Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia

Self Audit  Performed by GFD.169  Scores:  61 items with score A (good)  2 items with score B (minor change)  4 item with score X (N/A) Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia

Self Audit (cont.) Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia  B (minor changes)  3.2(1) is defined different sections in CP/CPS, it is needed to be defined in 4.1, 4.2, 4.6, 4.7  3.2.3(12) is defined in CP/CPS but in practice it is not easy to follow all documents in an auditable form. These items are collected and arranged 4 times in a year.

Self Audit (cont.) Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia  B (minor changes)  3.2(1) is defined different sections in CP/CPS, it is needed to be defined in 4.1, 4.2, 4.6, 4.7  3.2.3(12) is defined in CP/CPS but in practice it is not easy to follow all documents in an auditable form. These items are collected and arranged 4 times in a year.

Self Audit (cont.) Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia  X (N/A)  3.1.2(9) Online CA  3.1.2(10) Secure Environment  3.1.2(16) Online CA  3.1.6(41) Hardware Token

Policy Updates Jan 18-20, th EUGridPMA meeting, Bratislava, Slovakia  There is a need to change the CRL path of the TR-Grid CA  Identity vetting with e-Government system:  Benefits for checking the status of a person whenever we want without any updates from the researcher.  Do not need to store any identity card after f-2-f identity vetting and getting ID number for Turkish citizen.  These updates will be done at the end of 2016 with CP/CPS updates.