Re: What are people using for Certificate Authorities?

["James A. Jokl" <jaj () VIRGINIA EDU>]

There is a fair amount of PKI activity in higher education now.
A lot of good materials are on or linked to from the HEPKI-TAG
web site: http://middleware.internet2.edu/hepki-tag

If you are getting started, I'd recommend scrolling down to the
the PKI-Lite section of the web site.  This section includes
reviewed certificate profiles that will get you started with
certs that will work well with applications. The profiles also
highlight some of the decisions that you'll need to make when you
set your profiles.  Also included is a simple Policy and
Practices framework with a fill in the blanks format to get you
past this hurdle.  A great starting place for PKI is the PKI-Lite
Recipe document that is also linked into this section of the web
site.

You will also find links to open source CA software and links to
some of the schools that are actively using/deploying campus
PKIs.  The Dartmouth PKI Labs web site (see link off of the main
HEPKI-TAG page) also has lots of good information.

                      Jim

--On Tuesday, March 30, 2004 3:28 PM -0500 James Moore
<jhmfa () RIT EDU> wrote:

> Anyone operating campus Certificate Authroities?
>
> Willing to share war stories?
>
> Jim
>
> - - -
> Jim Moore, CISSP, IAM
> Information Security Officer
> Rochester Institute of Technology
> 13 Lomb Memorial Drive
> Rochester, NY 14623-5603
> Office: 585-475-5406
> Fax: 585-475-7950
>
> "In cases of defence 'tis best to weigh the enemy more mighty
> than he seems" - William Shakespeare (Henry V, Act 2, Scene 4)
>
> **********
> Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.