June 28, 2000 Robert Moskowitz rgm@icsa.net CMP Interop Project June 28, 2000 Robert Moskowitz rgm@icsa.net

CMP Interop Goals Establish interoperability of Certificate Management Protocol CMP, RFCs 2510 & 2511, and ID 2510bis A set of CMP transactions a public demonstration of CMP interoperability Initial efforts in 4 workshops May 99 - Nov ‘99 ICSA.net is coordinating/running Interop efforts

Completed Milestones Solicit participation (22 Mar 2000) Set initial testing and goals (Apr 2000) First workshop, ir/ip (2 - 4 May 2000) Lessons learned, plans for rest of testing (May 2000) Second workshop, cr/cp (6 - 8 Jun 2000) Some vendors already testing rr/rp Provide TWG with status update, solicit feedback (28-29 Jun 2000 in Dublin)

Active Interop Participants Certicom (Trustpoint) Cylink Entegrity Entrust TC Trustcenter SSH Sun (Java)

Next Milestones Third workshop, rr/rp (11 - 14 Jul 2000) Provide IETF with status update, solicit feedback (1 - 3 Aug 2000 in Pittsburgh) Fourth workshop, kur/kup (8 - 10 Aug 2000) Fifth workshop, ccr/ccp (5 - 7 Sep 2000) Provide TWG with status update, solicit feedback (12 - 14 Sep 2000 in Montreal) Plan public demo (Oct 2000)

Pending Interop Participants Baltimore IBM Jonah (Reference implementation) NIST Open CA RSA Research Utimaco

Lessons Learned CA policy has a major impact on EE use of CMP Need to collect basic policy items A few areas in specs are unclear Need list ‘lore’ to implement Is 2510bis stable? Disagreement on pkiConf content

Conclusions CMP Interop does not currently exist CMP Interop CAN be achieved this year Hard work all around Clean up the specs? More participation needed