DataGrid Certificate Authorities meeting
----------------------------------------

Friday, 2nd March, 2001.  09:00 to 17:00
Room 40-R-C10, CERN



Draft Agenda
----------------

Morning session (09:00 to 12:30)
---------------

Roundtable reports - update on status of your CA since our December meeting (or first report for 
newcomers)

News from DataGrid management - who will take care of authorisation and general security?

News from Terena PKI-Coord group and elsewhere(?)

Procedure for configuring globus clients for our list of trusted CA's (see note 1)
Document procedure for users to obtain a certificate.
Links to these on the WP6 web.

Results of (any?) tests of globus job submission between CA domains (see note 2)
Plans for future testing.

Review of CA policies and procedures (see note 3)
	INFN
	NIKHEF
	minimum requirements?

Afternoon session  (14:00 to 17:30)
-----------------

Communication procedures
	Revocation lists
	GRID mapfile entries - user/account registration etc.
	Security problems/incidents
	Updating WP6 web pages

Future plans
	Amsterdam meeting
	Longer term

More general security discussion/issues
	Presentation and discussion to ATF meeting (1st March)
	expansion of mandate
	new membership?

Date of next meeting

AOB



Notes:

1. We already have our own internal instructions for configuring our own clients. We need to add 
in all the other "trusted" CA's. How should we do that?

2. Please can I encourage you to do some testing of the use of our certificates across security 
domains before the meeting (maybe this has already been done!). I suggest that each of you tries 
contacting one or two other CA managers to arrange for test accounts and entries in the grid 
mapfile to test globus job submission between domains (by "domain", I mean a set of 
clients/servers using a single CA). I would like to hear from each of you at the meeting that you 
have successfully completed these tests.

3. CPS. For those of you who have already written up your procedures and policies, please will 
you distribute these to all for consideration. I imagine that some of these may need translation 
into English. If you haven't yet written anything down, I encourage you to start work on this. We 
won't have time to consider all sites, but I would at least like to discuss some of the sites that 
have been in operation for some time (France, Italy, UK ... ). We should start to discuss what 
minimum requirements we may wish to insist on for Testbed 1 later this year.

------------------------------------------------
Dr David Kelsey
Computing & Resource Management
Particle Physics Department
Rutherford Appleton Laboratory
Chilton, DIDCOT, OX11 0QX, UK

e-mail: D.P.Kelsey@rl.ac.uk
Tel: [+44](0)1235 445746 (direct)
Fax: [+44](0)1235 446733
------------------------------------------------