5 th APGrid PMA Meeting An Update from the TAGPMA Vinod Rebello Taipei, Taiwan 20th April 2009 The Americas Grid Policy Management Authority

2 APGrid PMA, Apr 09Vinod Rebello – TAGPMA Membership CANARIE – Canada DOEGrids (ESNet) – USA EELA – International Fermi National Accelerator Laboratory - USA HEBCA/USHER/Dartmouth College – USA IBDS (ANSP) - Brazil WLCG – International NCSA – USA NERSC – USA Open Science Grid – International Purdue University – USA REUNA – Chile San Diego Supercomputer Center – USA SENAMHI – Peru TACC – USA TeraGrid – USA Texas High Energy Grid – USA University of Virginia – USA UFF – Brazil ULA – Venezuela UNAM – Mexico UNLP – Argentina IGTF Accredited CA Operators CA Accreditation in progress Interested in accreditation Relying Party

3 APGrid PMA, Apr 09Vinod Rebello – TAGPMA Membership That is 22 Members from North, Central and South America Covering Canada, US, Mexico, Venezuela, Chile, Peru Argentina and Brazil. Two Catchall CAs cover the remaining countries. –11 IGTF Accredited CAs 7 Classic –TACC - US, UFF BrGrid & UFF LACGrid - Brazil, UNLPGrid - Argentina, REUNA – Chile, ULAGrid – Venezuela, GridCanada. 2 SLCS (NCSA and NERSC – US) 2 MICS (NCSA and TACC – US) –3 CAs pending, 4 interested in accreditation 1 Classic (SENAMHI – Peru), 2 SLCS (FermiLabs – US, NSCA to run a Federation-based SLCS) ANSP – Br, SDSC – US, U. of Virginia – US, Purdue U – US. –6 Relying Parties Colombia expected to join soon

4 APGrid PMA, Apr 09Vinod Rebello – Originally, an accredited member of the EUGridPMA. As the EUGridPMA meeting of Jan 2009, accreditation transferred to TAGPMA. CANARIE to hand over/back management and operations of the Canadian Grid CA to Canadian National Research Council (NRC). Transition to take place over the next few months, Roger Impey is the new POC. NRC will audit existing system and then plan to update/upgrade entire infrastructure, policy etc. However, NRC do not expect any interruption to the service. GridCanada CA

5 APGrid PMA, Apr 09Vinod Rebello – Current TAGPMA Officers Chair –Vinod Rebello (UFF – Brazil) Vice-Chair –Jim Marstellar (PSC – USA) Secretary –Margaret Murray (UT-Austin – USA) Trusted Introducer (nominated by the Chair) –Mike Helm (ESNet/LBL – USA) Term of office ends in July Elections to be held between May and June. Existing officers will not be running again so expect new names.

6 APGrid PMA, Apr 09Vinod Rebello – Communication Infrastructure IGTF Website TAGPMA Website has been migrated from Canarie to PSChttp:// –Hosts static, public information –Will undergo extensive updating over the next few months TAGPMA twiki http(s)://tagpma.es.net/wikihttp(s)://tagpma.es.net/wiki –hosts TAGPMA documents under development including profiles, revision histories, tutorials etc.

7 APGrid PMA, Apr 09Vinod Rebello – Communication Infrastructure Mailing list tagpma-general and other IGTF aliases migrated and managed by ESnet. – problems to the Chair A TAGPMA members only mailing list tagpma- private is also be used to broadcast more restrictive content, i.e. accreditation/audit reviews.

8 APGrid PMA, Apr 09Vinod Rebello – SLCS Profile Current IGTF approved version of the SLCS Profile is 2.1b, 03/02/ Principal Policy Changes –SLCS CAs must issue a CRL –Lowered HSM operating mode to Level 2 Language update –Brought up to date and in line with alterations made to the other profile documents

9 APGrid PMA, Apr 09Vinod Rebello – SLCS Profile Status Complete revision history on the wiki: SLCS Evaluation Spreadsheet [Thanks to Reimer and Shreyas] available on the TAGPMA wiki CS-Review-2.1.xls CS-Review-2.1.xls Corrections to references (okayed by TAGPMA) should appear online imminently as version 2.1c.

10 APGrid PMA, Apr 09Vinod Rebello – Classic and MICS Profiles Classic Profile (Version 4.2, 8/10/2008). Approved by the TAGPMA at UNLP F2F Current version of the MICS profile (V1.0 17/07/2007) is undergoing revision. –Clarification of IdM´s and CA´s respective responsibilities –Language update to bring it in line with other profiles. –Expect new version to be ready for distribution to other PMAs after next TAGPMA F2F meeting

11 APGrid PMA, Apr 09Vinod Rebello – Next TAGPMA F2F Meeting 9th TAGPMA F2F at Pittsburgh Supercomputing Center, Pittsburgh, PA, US –April 30 th – May 2 nd, 2009, 9am – 6pm –To discuss changes to IGTF Charter, TAGPMA charter, CA accreditation reviews and audits, Federated identity Management for Grids, InCommon to IGTF Profile mapping, CA Cloning for Continuity of Operations, CA Bridges, … –Arrangements/agenda details can be found here: –As usual, Video Conferencing will be able for remote attendees. –Pittsburgh is on UTC/GMT -4 hours or EDT

12 APGrid PMA, Apr 09Vinod Rebello – Prior to the F2F Meeting Preceded by a Federated Identity Workshop (April 29 th ) to discuss –the state of existing and upcoming Federation technologies –what is available and what is needed for interoperability between different communities –Milan Sova to talk about the European perspective and Federated SSH –Tools for federated CAs –InCommon: Levels of Assurance and roadmap. –Commercial vendors will present their portfolios – Open to the public, video/webcast details to follow. To start at 8am EDT. Panel discussion late afternoon.

13 APGrid PMA, Apr 09Vinod Rebello – TAGPMA Conference Calls Fortnightly Video Conference Call are now on Wednesdays. –Next one is 13th May, 11am CDT –Video arrangements: Video ESNet or GDS or phone # –The agenda is usually posted on tagpma-general the day before. Feel free to join in and participate in any of our meetings Thanks for listening and Doug Olson for presenting