IHEP Grid CA Status Report Gongxing Sun ([email protected]) F2F Meeting 20 Apr. 2009 Computing...
-
Upload
garry-newman -
Category
Documents
-
view
243 -
download
2
Transcript of IHEP Grid CA Status Report Gongxing Sun ([email protected]) F2F Meeting 20 Apr. 2009 Computing...
![Page 1: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/1.jpg)
IHEP Grid CA Status ReportIHEP Grid CA Status Report
Gongxing Sun ([email protected])
F2F Meeting
20 Apr. 2009
F2F Meeting
20 Apr. 2009
Computing Centre, IHEP,CAS,China
![Page 2: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/2.jpg)
OutlineOutline
• IHEP Grid CA Overview• Current status• Statistic
![Page 3: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/3.jpg)
IHEP IntroductionIHEP Introduction
• IHEP——Institute of High Energy Physics, CAS,China
• The major institute conducts high energy physics experiments in China
• Research fields Including HEP, cosmic ray, radiation,
nuclear,theoretical physics, advanced accelerator technologies etc
![Page 4: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/4.jpg)
IHEP Grid CA IntroductionIHEP Grid CA Introduction
• IHEP CA is established in 2004 by IHEP Computing Center
• IHEP CA is an accredited member of both EUGridPMA and APGridPMA.
• Web site▶https://gridca.ihep.ac.cn/
• CA certificate▶https://
gridca.ihep.ac.cn/cacert/index.html
![Page 5: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/5.jpg)
IHEP Grid CA IntroductionIHEP Grid CA Introduction
▶ Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei▶ Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN=
host/voms.ihep.ac.cn• CRL Policy
▶ https://gridca.ihep.ac.cn/crl/index.html▶ The lifetime of CRL is 30 days.▶ CRL is updated immediately after every
revocation.▶ CRL is reissued 7 days before expiration even
if there have been no revocation.
![Page 6: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/6.jpg)
Current status of CA operationCurrent status of CA operation
• Personal/Host/Service Certificate: Submit application form for the verification, and then complete the online form step by step.
• Setup a special room as CA Room.One person hold the key of the CA room , and the other one hold the key of the CA Computer.
![Page 7: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/7.jpg)
Current status of CA operationCurrent status of CA operationThe following events have been recorded and
archived: ▶Request for certificates▶Issue certificates ▶Request for revocation ▶Issue CRLs ▶Login/Logout/Reboot event of the CA
machine ▶All notifications are sent by the CA ▶Logs for data exchange between CA and
RA• Archives are stored in a safe box, the offline
media. Only RA and CA Operators can access the box.
![Page 8: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/8.jpg)
Current status of CA operationCurrent status of CA operation
• Current applications▶EUChinaGrid Project▶EGEE Project▶LCG Project▶CMS Project▶ATLAS Project▶BES Project
![Page 9: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/9.jpg)
Current status of CA operationCurrent status of CA operation
• Staff structure
RA Operator CA Operator
AuthenticationAccept request,
communicate with CAIssue certificate
Private keymanagement
helpdesk
SecurityOfficer
![Page 10: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/10.jpg)
StatisticStatistic
Number of issued certificatesNumber of issued certificates
Last update: Apr 15 15:14:47 2009 GMT
User Certificate
Host Certificate
Service Certificate
Total
VALID 81 94 0 175
REVOKED
94 84 1 179
EXPIRED 168 176 6 350
IHEP PKU HKU BUAA NJNU CERN RSGS
CNIC TSINGHUA
CCNU SDU NNU NJU USTC
CooperationCooperation OrganizationsOrganizations
![Page 11: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/11.jpg)
Update statusUpdate status
• Due to the maintenance of the power supply of IHEP computing center, IHEP CA website had been unavailable from Nov/15/2008 07:00(CST) to Nov/17/2008 18:00(CST).
• The new removable hard disk replaced the old one.
![Page 12: IHEP Grid CA Status Report Gongxing Sun (sungx@ihep.ac.cn) F2F Meeting 20 Apr. 2009 Computing Centre, IHEP,CAS,China.](https://reader036.fdocuments.net/reader036/viewer/2022062314/56649f075503460f94c1cbc6/html5/thumbnails/12.jpg)
ThanksThanks
Thank you!