1. 1 PKI update Operational service: pki.surfnet.nlpki.surfnet.nl –8 orgs certified, 2 underway –Non-RFC2527 compliant CPS –Medium security LOA –Demo’s for obtaining (worthless) certs and for SSL(worthless) certs SSL

2. 2 Innovation Directory integration –ldap.gigacorp.nl/pkildap.htmlldap.gigacorp.nl/pkildap.html –Including CA certs and CRLs RFC2527-style CPS (SURFnet Office) 4 pilots with PKI smartcards/tokens: –iKey3000 with VPN –Multiple certs on card for w2k logon and SSL –SSL client & server authentication –Automating forms workflow

3. 3 Multiple certs on card TUEexpC A X.521_CA TUEcampus -testCA W2k_CA Web server (Apache- SSL) Authenti- catie certificaat Win2k logon certificaat Web server IIS-SSL TUETestCA TU/e primary (off-line) SURFnet Test CA (X.521_CA ) Issuing CA “Mogelijke derde” (X.521_CA ) Web Server (SSL) Authenti -catie certificaa t Directory

4. 4 Various Brian Gilmore & Ton appointed I2 MACE members Ton appointed TTC member for middleware There’s more than PKI: –Mobile phone –Banking card Dutch government PKI initiative well underway