1. Update of APGridPMA APGridPMA Meeting Academia Sinica, Taiwan 22 March, 2013 1

2. General Status Chair: Eric Yen (ASGCCA), Vice Chair: Yoshio Tanaka (AIST CA) Routine Gathering Spring: together with ISGC in ASGC, Taiwan Fall: collocate with related events, otherwise video conference is held instead By request: whenever there is any special issue Self-Auditing: every CA has to have self-audit report once every year Regional Catch-All CA: ASGCCA Due to limited human resources, most CAs invest more time on the operation technology than the policy 2

3. CACountryCore LibrarySHA-2 Status #User Cert #Host Cert AIST CA JP NAREGI CA 2.41263 APAC CA AU Only maintain CRL after Jun 2012 ASGC CA TW OpenSSL 1.0, OpenCAReady271228 CNIC CA CN OpenSSL 0.98, OpenCAFeb. 201301 SDG CA CN OpenSSL 0.98, OpenCAFeb. 2013272 HKU CA CN OpenSSL 0.98, OpenCAFeb. 2013311 IGCA IN OpenSSL, OpenCA IHEP CA CN OpenSSL 1.0, OpenCAFeb. 201310377 KEK CA JP NAREGI CA 2.4Jan. 2013 KISTI CA KR OpenSSL 0.98, OpenCA43 MYIFAM MY OpenSSL 098, OpenCAMar. 20133033 NCHC CA TW OpenSSL 0.98, OpenCAFeb. 201300 NECTEC CA TH OPenSSL 0.97, OpenCAFeb. 2013418 NAREGI CA JP NAREGI CA 2.4READY119 PRAGMA-UCSD US NAREGI CA 2.2.5Feb. 2013112 495507

4. CA Update Australia Australian Access Federation Inc. takes over the responsibility, aiming for a national authentication services (AusCert) operational in 2014 Re-tendering for commercial certificate services After June 2012, the APAC CA only maintain CRL From Jan 2013, the CA services are supported as ASGCCA RAs. 27 current RAs have been migrated. Japan HPCI (High Performance Computing Infrastructure) CA is operating since Sep. 2012. Will be IGTF CA in 2013. AIST CA is converging to HPCI CA. Planned to be decommissioned after Jan. 2014 and only minimal services are maintained in 2013. New Zealand: All RAs have been transferred to ASGCCA in 2012. 4

5. SHA-2 Migration Status All CA will have SHA-2 capability after March 2013 SHA-2 EECs could be issued on request CAs may publish SHA-2 CRLs at separate distribution end point Only SHA-2 CRL is allowed from 1 Sep. 2014. No SHA-1 end entity certificate will be issued after September 2013 Once SHA-1 is broken, the SHA-1 EECs should be revoked after March 2013. Status of middleware and application readiness should be updated and shared 5

6. Next APGridPMA Meeting in 2013 Next F2F Meeting: Fall 2013 Suggestion and Volunteer Host are welcomed 6