IHEP Grid CA Status ReportIHEP Grid CA Status Report

Gongxing Sun (sungx@ihep.ac.cn)

F2F Meeting

20 Apr. 2009

F2F Meeting

20 Apr. 2009

Computing Centre, IHEP,CAS,China

OutlineOutline

• IHEP Grid CA Overview• Current status• Statistic

IHEP IntroductionIHEP Introduction

• IHEP——Institute of High Energy Physics, CAS,China

• The major institute conducts high energy physics experiments in China

• Research fields Including HEP, cosmic ray, radiation,

nuclear,theoretical physics, advanced accelerator technologies etc

IHEP Grid CA IntroductionIHEP Grid CA Introduction

• IHEP CA is established in 2004 by IHEP Computing Center

• IHEP CA is an accredited member of both EUGridPMA and APGridPMA.

• Web site▶https://gridca.ihep.ac.cn/

• CA certificate▶https://

gridca.ihep.ac.cn/cacert/index.html

IHEP Grid CA IntroductionIHEP Grid CA Introduction

▶ Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei▶ Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN=

host/voms.ihep.ac.cn• CRL Policy

▶ https://gridca.ihep.ac.cn/crl/index.html▶ The lifetime of CRL is 30 days.▶ CRL is updated immediately after every

revocation.▶ CRL is reissued 7 days before expiration even

if there have been no revocation.

Current status of CA operationCurrent status of CA operation

• Personal/Host/Service Certificate: Submit application form for the verification, and then complete the online form step by step.

• Setup a special room as CA Room.One person hold the key of the CA room , and the other one hold the key of the CA Computer.

Current status of CA operationCurrent status of CA operationThe following events have been recorded and

archived: ▶Request for certificates▶Issue certificates ▶Request for revocation ▶Issue CRLs ▶Login/Logout/Reboot event of the CA

machine ▶All notifications are sent by the CA ▶Logs for data exchange between CA and

RA• Archives are stored in a safe box, the offline

media. Only RA and CA Operators can access the box.

Current status of CA operationCurrent status of CA operation

• Current applications▶EUChinaGrid Project▶EGEE Project▶LCG Project▶CMS Project▶ATLAS Project▶BES Project

Current status of CA operationCurrent status of CA operation

• Staff structure

RA Operator CA Operator

AuthenticationAccept request,

communicate with CAIssue certificate

Private keymanagement

helpdesk

SecurityOfficer

StatisticStatistic

Number of issued certificatesNumber of issued certificates

Last update: Apr 15 15:14:47 2009 GMT

User Certificate

Host Certificate

Service Certificate

Total

VALID 81 94 0 175

REVOKED

94 84 1 179

EXPIRED 168 176 6 350

IHEP PKU HKU BUAA NJNU CERN RSGS

CNIC TSINGHUA

CCNU SDU NNU NJU USTC

CooperationCooperation OrganizationsOrganizations

Update statusUpdate status

• Due to the maintenance of the power supply of IHEP computing center, IHEP CA website had been unavailable from Nov/15/2008 07:00(CST) to Nov/17/2008 18:00(CST).

• The new removable hard disk replaced the old one.

ThanksThanks

Thank you!