1. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 www.peppol.eu OpenPEPPOL Transport Infrastructure Rome 2013-10-03 Sven Rasmusen Danish Agency for Digitisation (DIGST) (DK) Dir OpenPEPPOL TI-CC svrra@digst.dk

2. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 Agenda Page 2 1)Status on TI-CC activities PKI Migration AS/2 Protocol and Business Envelope (SBDH) Message Level Response (MLR) 2) Supporting Interoperability for START message transfer 3) Interoperability issues with START 4) TICC/ServiceProvider Communication 5) TICC in e-SENS 6) AOB

3. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 PKI Migration Page 3 Background  Migration from PEPPOL Test PKI is required for technical and commercial reasons  New Solutions has same structure, services and Certificate types  To ensure continuous operation a gradual migration is defined (no Big Bang) Migration path  Test with solutions providers  Dual root-CA/intermediate certificate support in migration phase  Revoke of old certificates after migration phase Status PKI availability  Root and Intermediate certificates published and Included in CIPA/Oxalis  SMK – Test SML instance available  Test with CIPA and Oxalis is completed with current releases

4. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 PKI Migration Page 4 Time tabel T1 - September 1 st 2013: Migration period start. By this date all AP’s must be ready to accept both old and new certificates. OpenPEPPOL will from this date issue new certificates. T2 – October 31 st 2013: Migration period end. By this date all AP/SMP’s must have renewed their certificates. Required actions! 1.Before September 1st: Make sure to upgrade CIPA/Oxalis and/or verify that your solutions support dual root-CA for PEPPOL Certificates 2.Update certificates to New-PKI certificates between September 1st and October 31st

5. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 PKI Migration Page 5 Status AP/SMP V2 certificate in distribution/production - ongoing SML Accepts V1 and V2 Updates – V1 signed responses SMK Accepts V2 Updates – V2 signed responses Next steps SML change to V2 signed responses (week 43 – date to be notified) Complete migration to V2 for all AP & SMP certificates (October 30) SMK change to V2 Test PKI (november/december 2013)

6. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 AS/2 Protocol and Business Envelope Page 6 Status  Draft specification  Implementation in progress for CIPA and Oxalis  Final specification and testing 2013 Implementation Process  Intension to replace START as mandatory protocol  Available for optional use Q1 2014  Policy and timeline to be defined  Proposal: Phase in 6 month -> Mandatory by mid 2014?

7. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 SBDH Envelope Page 7 Policy for use of SBDH  Envelope MUST be applied for all messages exchanged with AS2  Envelope MUST be applied for all messages based on BIS- specifications developed from now on regardless of transport protocol  Envelope MUST NOT be applied to messages based on existing BIS- specifications when START is used

8. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 Oxalis with AS/2 Page 8

9. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 Message Level Response (MLR) Page 9 Status  Specification – work in progress  Facilitate rejection based on technical validation  Possible use as receipt (positive acknowledgement)  Not integrated in Profile processes (ex “Invoice with response”) Policy for Implementation and use  TI-CC requirements  Mandatory support for rejections by Aps’s ?  Definition of receiver ID (Participant / AP) ?

10. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 Supporting Interoperability for START message transfer Page 10 Policy for Operation of AP’s  Do not validate incoming messages for rejectings on protocol level  Make sure to send only valid messages:  Validate all messages before sending to other AP’s  Ensure validity of messages to be sent by other means Release management of Key SW-components  Metro 2.2.1-1  The PEPPOL WSDL file  Java version 1.6 for Runtime Known discrepancies between the BDX specs and SW Implementations  WSDL takes precedence over DBX Specs  Refer to resource page http://www.peppol.eu/peppol_components/- transport-infrastructure/ITC-Transport-BDX%20Discrepancies-100.pdf.http://www.peppol.eu/peppol_components/- transport-infrastructure/ITC-Transport-BDX%20Discrepancies-100.pdf.

11. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 OpenPEPPOL Servise Provider Communication TI-CC members List OpenPEPPOL -> Members - Moderated by Operating Office TI-CC Development team List Technical development discussions - All on the list can send to all AP&SMP-Service Provider Technical Notification List Operational issues - All on the list can send to all Service Provider Security alert List All on the list can send to all (Same as above) ? List of all Service Providers on OpenPEPPOL website With contact Information (Commersial and Technical) Technical Alert Webpage on OpenPEPPOL Website Scheduled activity / SML Maintenence / General impact / ….

12. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 TI-CC in e-SENS Page 12 E-Delivery specifications and policy (e-SENS WP6)  Submission of BUSDOX (SML&SMP)  AS/2 and Business Envelope  Identifierscheme and Trust Piloting (e-SENS WP5)  Consolidated e-Delivery platform with e-Procurement Domain Scenarios Governance and LCM (e-SENS WP3)  Long Term Sustainamebility (e-SENS WP3)  Engage with Standards Organisations (Oasis, CEN etc…) Challenges  Pilot resources  AS/2 vs ebMS3 used in other LSP’s

13. PEPPOL is an EU co-funded project CIP-ICT PSP-2007 No 224974 Page 13 AOB  …. For Further information:  http://www.peppol.eu http://www.peppol.eu  http://www.peppol.eu/peppol_components/-transport- infrastructure/infrastructure-resources http://www.peppol.eu/peppol_components/-transport- infrastructure/infrastructure-resources