16 th EUGridPMA Meeting An Update from the TAGPMA Vinod Rebello Zurich, Switzerland 11th May 2009 The Americas Grid Policy Management Authority

2 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – TAGPMA Membership NRC – Canada ESnet (DOEGrids) – USA EELA – International Fermi National Accelerator Laboratory - USA HEBCA/USHER/Dartmouth College – USA IBDS (ANSP) - Brazil WLCG – International NCSA – USA NERSC – USA Open Science Grid – International Purdue University – USA REUNA – Chile San Diego Supercomputer Center – USA SENAMHI – Peru TACC – USA TeraGrid (PSC) – USA Texas High Energy Grid – USA University of Virginia – USA UFF – Brazil ULA – Venezuela UNAM – Mexico UNLP – Argentina IGTF Accredited CA Operators CA Accreditation in progress Interested in accreditation Relying Party

3 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – TAGPMA Membership Continues to be 22 Members from North, Central and South America 11 IGTF Accredited CAs (8 Classic, 2 SLCS, 1 MICS) Further 1 Classic, 2 SLCS and 1 MICS CAs in process of accreditation (more on this later) + 3 more about to begin TAGPMA charter updated (currently v2.6) –Outlines process for “involuntary resignation” –Membership states: active; inactive (automatic if don’t participate in TAGPMA activities for a year); and suspended (requires TAGPMA vote). –Loss of membership implies loss of accreditation

4 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – As of the Cyprus EUGridPMA meeting (Jan 2009), accreditation transferred to TAGPMA. CANARIE has handed over/back management and operations of the Canadian Grid CA to Canadian National Research Council (NRC) NRC has substituted CANARIE as a TAGPMA member with Roger Impey is the new POC NRC will audit existing system then upgrade entire infrastructure and update policy etc. However, NRC do not expect any interruption to the service. GridCanada CA

5 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Current TAGPMA Officers Chair –Vinod Rebello (UFF – Brazil) Vice-Chair –Jim Marstellar (PSC – USA) Secretary –Margaret Murray (UT-Austin – USA) Trusted Introducer (nominated by the Chair) –Mike Helm (ESNet/LBL – USA) Term of office ends in July Elections to be held between May and June. Existing officers will not be running again so expect new names for next meeting.

6 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Last TAGPMA F2F Meeting 9th TAGPMA F2F at Pittsburgh Supercomputing Center, Pittsburgh, PA, US –April 30 th – May 2 nd, 2009, 9am – 6pm –Agenda details can be found here: –Full minutes will be posted soon –Highlights to follow …

7 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Just Prior to the F2F Meeting PSC hosted a Federated Identity Workshop (April 29 th ) open to the public Objective was to discuss the state of existing and upcoming Federation technologies; what is available and what is needed for interoperability between different communities –Presentations can be found here: –InCommon seemed keen to work IGTF. –Verizon Business (CyberTrust) showed willingness host IGTF CAs along the lines (I guess) of Quo Vadis –With SafeNet/Aladdin merger less likely to have HSM-like tokens

8 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – IGTF Charter Amendment The TAGPMA voted to approve the EUGridPMA proposed amendment to Namespace Assignment Policy described in Section 3.1 of V1.1 of the IGTF Charter (25 June 2008).

9 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – SLCS Profile Status Current IGTF approved version of the SLCS Profile is 2.1c, 03/02/ c.pdf c.pdf –Only minor changes from 2.1b to 2.1c (correction to references). Complete revision history on the wiki:

10 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – MICS Profile Status Current IGTF version of the MICS profile (V1.0 17/07/2007) is undergoing revision. TAGPMA approved V1.1 (02/05/08) 1.pdf 1.pdf –Language update to bring it in line with other profiles. –Does NOT contain changes (yet) to Section 3.3 See next slide

11 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Language used in Profiles IGTF membership growing steadily Diversity is leading to various (valid?) interpretations of Auth. Profile requirements A lot of common/similar text in all three APs Is the true intent of the policy statements being captured by the current language in the APs or is the meaning of the writers being forgotten? –See Jens’ Kihon Soapbox Presentation –Vinod brought this up at the last EUGridPMA meeting with respect to the Classic Profile. –For MICS, TAGPMA members are requesting an IGTF discussion on what constitutes “traceability” before addressing Section 3.3

12 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Other Relevant Highlights Revived Bridge WG “When can we move to SHA-2?” discussion Jim Basney showed that InCommon Federation’s Silver Identity Assurance Policy meets current SLCS requirements DoE Grids Audit Report – Some interesting feedback that perhaps should somehow filter back into Yoshio’s Audit guidelines – See Mike’s talk TAGPMA would be happy to be responsible for DoE Grid CA should ESnet wish to transfer accreditation from EUGridPMA.

13 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Almost Accredited FiNALly Fermi Lab’s SLSC CA is almost accredited (credits to Irwin Gaines) – only missing the OK from one reviewer for the Operational Review –Will be in the next IGTF distribution Also expect NCSA’s Federated-SLCS CA to be accredited before the next distribution is due out –Further questions to Jim Basney The MICS CA from TACC is also pretty close

14 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – Next TAGPMA F2F Meeting Proposing a joint PMA (IGTF all hands) meeting in Banff, Alberta, Canada, during week of the 12th October 2009, co-located with –OGF 27, 12th to 16th October –IEEE Grid 2009, 13th to 15th October –Cybera/CANARIE National Summit, 13th to 15th Considering extending the IGTF Session to one and half or two days during OGF and using some part of Saturday 17th to minimise overlap with other events. Please discuss Given Banff is going to busy, need to make arrangements and reservations soon

15 16th EUGridPMA Mtg, 11 May 09Vinod Rebello – TAGPMA Conference Calls Fortnightly Video Conference Calls are now on Wednesdays. –Next one is 13th May, 11am CDT –Video arrangements: Video ESNet or GDS or phone # –The agenda is usually posted on tagpma-general the day before. Feel free to join in and participate in any of our meetings Thanks