KEK GRID CA Takashi Sasaki Computing Research Center KEK

Current status No major problem Our CA operation is now based on CP/CPS Ver. 2.0 since April 8, 2008 – oid: – Reflected the previous external and internal review results According to the IGTF audit guideline document CP/CPS still in RFC2527 – Migration to RFC3647 is not yet planned

Issued certificates on Sep User certificates – 96 valid certificates among 275 issued expired: 8 ; revoked : 171 Host certificates – 204 valid among issued expired : 51 ; revoked : 322 Total – 300 valid among 852 issued expired : 59 ; revoked : 493

Next external review The last review was done on April 13rd, 2007 We are extremely busy on the replacement of the computer system and we want to postpone the next external review until the spring of 2009 If this is not approved by APGRID-PMA, we will try to find a time We need volunteers to be reviewers – AIST, NAREGI or someone else? We will have an internal review before the external review

Spam filtering on the APGRID-PMA list Now KEK is hosting the spam filtering for the APGRID-PMA mailing list – We are very happy if you think it is useful In our operation experience of the hardware appliance used on this purpose, there is still possibility to reject the signal – You have to know the fact and be careful