1. January 6, 1999Common Solutions Group1 X.509 Certificates @Princeton University Michael R. Gettes Princeton University Computing & Information Technology Collaboration Svcs Group (CSG), Mgr gettes@Princeton.EDU

2. January 6, 1999Common Solutions Group2 Collaboration Svcs Group (CSG) E-mail and Mailing Lists Directory Services (LDAP, CSO, NIS) NetNews Security Infra (Kerberos, Certificates) Document Management (print/fax, imaging) Calendaring Development and SysAdmin functions

3. January 6, 1999Common Solutions Group3 X.509 Certificates @ Princeton University Summer 1997 –Local Considerations –Entrust v. Others –Netscape Certificate Server –Secure E-Mail using Certificates –Servers and Users Decision on University Policy Future?

4. January 6, 1999Common Solutions Group4 Summer 1997 What MIT had done as seen at Spring CSG! How to do it for Princeton? Investigation of current offerings –Entrust vs. Verisign vs. RollYourOwn Inc. Entrust and others –Cost is prohibitive ($700,000) Netscape Certificate Server

5. January 6, 1999Common Solutions Group5 Netscape Certificate Server https://ca.Princeton.EDU Informix Database Management Easy Administrative Interface VGI for automatic verification –Kerberos authentication (SSL protected) IE poorly supported until recently LDAP Integration but No Key Escrow FREE!!!(at the time)

6. January 6, 1999Common Solutions Group6 Secure E-mail User Impact With Netscape and IE/Outlook –Sophisticated Users could endure –Size of messages –Impact on University business SSL for Servers –That’s the easy part

7. January 6, 1999Common Solutions Group7 University Policy February, 1998 –Cabinet issues policy regarding key escrow –University business must be able to recover critical communications and transactions –CIT cannot support secure e-mail until key escrow is available –Recommendation to departments as well

8. January 6, 1999Common Solutions Group8 Future? Netscape Certificate Server –Will support Key Escrow –How much will it cost? (< $1/certificate) –Will users be able to use it? –To PGP or not to PGP Cost is the driving force –Entrust is makes deal for 11 million certs for about $1.1 million (with Canadian gov’t)???