5 th APGrid PMA Meeting An Update from the TAGPMA Vinod Rebello Taipei, Taiwan 20th April 2009 The Americas Grid Policy Management Authority

5th APGrid PMA Meeting

An Update from the TAGPMA

Vinod Rebello

Taipei, Taiwan20th April 2009

The Americas Grid Policy Management Authority

2APGrid PMA, Apr 09 Vinod Rebello – [email protected]

TAGPMA Membership

CANARIE – Canada DOEGrids (ESNet) – USA EELA – InternationalFermi National Accelerator Laboratory - USAHEBCA/USHER/Dartmouth College – USAIBDS (ANSP) - BrazilWLCG – InternationalNCSA – USANERSC – USAOpen Science Grid – InternationalPurdue University – USA REUNA – ChileSan Diego Supercomputer Center – USA SENAMHI – PeruTACC – USATeraGrid – USA Texas High Energy Grid – USAUniversity of Virginia – USA UFF – BrazilULA – Venezuela UNAM – Mexico UNLP – Argentina

IGTF Accredited CA OperatorsCA Accreditation in progressInterested in accreditationRelying Party


TAGPMA Membership

• That is 22 Members from North, Central and South America

• Covering Canada, US, Mexico, Venezuela, Chile, Peru Argentina and Brazil. Two Catchall CAs cover the remaining countries.– 11 IGTF Accredited CAs

• 7 Classic – TACC - US, UFF BrGrid & UFF LACGrid - Brazil, UNLPGrid -

Argentina, REUNA – Chile, ULAGrid – Venezuela, GridCanada. • 2 SLCS (NCSA and NERSC – US)• 2 MICS (NCSA and TACC – US)

– 3 CAs pending, 4 interested in accreditation• 1 Classic (SENAMHI – Peru), 2 SLCS (FermiLabs – US, NSCA

to run a Federation-based SLCS)• ANSP – Br, SDSC – US, U. of Virginia – US, Purdue U – US.

– 6 Relying Parties• Colombia expected to join soon


• Originally, an accredited member of the EUGridPMA.

• As the EUGridPMA meeting of Jan 2009, accreditation transferred to TAGPMA.

• CANARIE to hand over/back management and operations of the Canadian Grid CA to Canadian National Research Council (NRC).

• Transition to take place over the next few months, Roger Impey is the new POC.

• NRC will audit existing system and then plan to update/upgrade entire infrastructure, policy etc.

• However, NRC do not expect any interruption to the service.

GridCanada CA


Current TAGPMA Officers

• Chair – Vinod Rebello (UFF – Brazil)

• Vice-Chair– Jim Marstellar (PSC – USA)

• Secretary– Margaret Murray (UT-Austin – USA)

• Trusted Introducer (nominated by the Chair)– Mike Helm (ESNet/LBL – USA)

• Term of office ends in July 2009. Elections to be held between May and June. Existing officers will not be running again so expect new names.


Communication Infrastructure

• IGTF Website http://www.igtf.net

• TAGPMA Website http://www.tagpma.org has been migrated from Canarie to PSC– Hosts static, public information– Will undergo extensive updating over the next few

months

• TAGPMA twiki http(s)://tagpma.es.net/wiki – hosts TAGPMA documents under development

including profiles, revision histories, tutorials etc.


Communication Infrastructure

• Mailing list tagpma-general and other IGTF aliases migrated and managed by ESnet.– Email problems to the Chair ([email protected])

• A TAGPMA members only mailing list tagpma-private is also be used to broadcast more restrictive content, i.e. accreditation/audit reviews.


SLCS Profile

• Current IGTF approved version of the SLCS Profile is 2.1b, 03/02/2009 http://www.tagpma.org/files/SLCS-2.1b.pdf

• Principal Policy Changes– SLCS CAs must issue a CRL– Lowered HSM operating mode to Level 2

• Language update– Brought up to date and in line with alterations

made to the other profile documents


SLCS Profile Status

• Complete revision history on the wiki: http://tagpma.es.net/wiki/bin/view/Main/SLCS2

• SLCS Evaluation Spreadsheet [Thanks to Reimer and Shreyas] available on the TAGPMA wiki http://tagpma.es.net/wiki/pub/Main/SLCSPro/SLCS-Review-2.1.xls

• Corrections to references (okayed by TAGPMA) should appear online imminently as version 2.1c.


Classic and MICS Profiles

• Classic Profile (Version 4.2, 8/10/2008).• Approved by the TAGPMA at UNLP F2F

• Current version of the MICS profile (V1.0 17/07/2007) is undergoing revision.– Clarification of IdM´s and CA´s respective

responsibilities– Language update to bring it in line with other

profiles.– Expect new version to be ready for distribution to

other PMAs after next TAGPMA F2F meeting


Next TAGPMA F2F Meeting

• 9th TAGPMA F2F at Pittsburgh Supercomputing Center, Pittsburgh, PA, US– April 30th – May 2nd, 2009, 9am – 6pm– To discuss changes to IGTF Charter, TAGPMA charter,

CA accreditation reviews and audits, Federated identity Management for Grids, InCommon to IGTF Profile mapping, CA Cloning for Continuity of Operations, CA Bridges, …

– Arrangements/agenda details can be found here: http://indico.rnp.br/conferenceDisplay.py?confId=47

– As usual, Video Conferencing will be able for remote attendees.

– Pittsburgh is on UTC/GMT -4 hours or EDT


Prior to the F2F Meeting

• Preceded by a Federated Identity Workshop (April 29th) to discuss – the state of existing and upcoming Federation

technologies– what is available and what is needed for

interoperability between different communities– Milan Sova to talk about the European perspective

and Federated SSH– Tools for federated CAs– InCommon: Levels of Assurance and roadmap.– Commercial vendors will present their portfolios – http://indico.rnp.br/conferenceDisplay.py?confId=48

• Open to the public, video/webcast details to follow.• To start at 8am EDT. Panel discussion late afternoon.


TAGPMA Conference Calls

• Fortnightly Video Conference Call are now on Wednesdays. – Next one is 13th May, 11am CDT– Video arrangements: Video ESNet 884483 or GDS

0011349884483 or phone 1-510-883-7860 884483#– The agenda is usually posted on tagpma-general the

day before.

• Feel free to join in and participate in any of our meetings

• Thanks for listening and Doug Olson for presenting

Documents

5 th APGrid PMA Meeting An Update from the TAGPMA Vinod Rebello Taipei, Taiwan 20th April 2009 The Americas Grid Policy Management Authority