IHEP Grid CA Status Report Wei F2F Meeting 8 Mar Computing Centre, IHEP,CAS,China
Outline IHEP Grid CA Overview Current status of CA operation Update status
IHEP Introduction IHEP——Institute of High Energy Physics, CAS, China The major institute conducts high energy physics experiments in China
IHEP Grid CA Introduction The IHEP CA is established and managed by IHEP Computing Center in Beijing and has been running since The IHEP CA is an accredited member of both EUGridPMA and APGridPMA. Web site ▶ CA certificate ▶ tml tml
IHEP Grid CA Introduction ▶ Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei ▶ Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN= host/voms.ihep.ac.cn CRL Policy ▶ ▶ The lifetime of CRL is 30 days. ▶ CRL is reissued 7 days before expiration even if there have been no revocation. ▶ Last Update: Feb 09 08:32: GMT
Current status of CA operation Personal/Host/Service Certificate: Submit application form for verification, then complete online request procedure step by step. Establish a Specialized CA Room Only one person has the key to the CA room, and the other has the key to the CA Computer.
Current status of CA operation The following events are recorded and archived: ▶ All requests for certificates ▶ All issued certificates ▶ All requests for revocation ▶ All issued CRLs ▶ Login/logout/reboot of the CA machine ▶ All notifications sent by the CA ▶ Logs for data exchange between CA and RA Archives are stored in an offline media which is stored in a safe box. Only RA and CA operators can access them.
Current status of CA operation Staff structure RA OperatorCA Operator Authentication Accept request, communicate with CA Issue certificate Private key management helpdesk Security Officer
Update status Number of issued certificates Last update: Feb 10 09:18: GMT User Certificate Host Certificate Service Certificate Total VALID REVOKED EXPIRED IHEPPKUHKUBUAANJNUSEURSGS CNICTSINGHUACCNUSDUNNUNJUUSTC CooperationOrganizations Cooperation Organizations
Update status Due to a power supply maintenance for the whole computing room, the IHEP CA website is unavailable from Sep/15/ :30(CST) to Sep/17/ :00(CST). Some needed webservice port was unopened after the whole adjustment on the export firewall. The new portable hard drive replace the old one. Plans to change the CA room.
Thanks Thank you!