ihep grid ca status report gongxing sun ([email protected]) f2f meeting 20 apr. 2009 computing...
TRANSCRIPT
IHEP Grid CA Status ReportIHEP Grid CA Status Report
Gongxing Sun ([email protected])
F2F Meeting
20 Apr. 2009
F2F Meeting
20 Apr. 2009
Computing Centre, IHEP,CAS,China
OutlineOutline
• IHEP Grid CA Overview• Current status• Statistic
IHEP IntroductionIHEP Introduction
• IHEP——Institute of High Energy Physics, CAS,China
• The major institute conducts high energy physics experiments in China
• Research fields Including HEP, cosmic ray, radiation,
nuclear,theoretical physics, advanced accelerator technologies etc
IHEP Grid CA IntroductionIHEP Grid CA Introduction
• IHEP CA is established in 2004 by IHEP Computing Center
• IHEP CA is an accredited member of both EUGridPMA and APGridPMA.
• Web site▶https://gridca.ihep.ac.cn/
• CA certificate▶https://
gridca.ihep.ac.cn/cacert/index.html
IHEP Grid CA IntroductionIHEP Grid CA Introduction
▶ Person Certificate: C=CN/O=HEP/O=IHEP/OU=CC/CN=zhu wei▶ Host Certificate: CN=CN/O=HEP/O=IHEP/OU=CC/CN=
host/voms.ihep.ac.cn• CRL Policy
▶ https://gridca.ihep.ac.cn/crl/index.html▶ The lifetime of CRL is 30 days.▶ CRL is updated immediately after every
revocation.▶ CRL is reissued 7 days before expiration even
if there have been no revocation.
Current status of CA operationCurrent status of CA operation
• Personal/Host/Service Certificate: Submit application form for the verification, and then complete the online form step by step.
• Setup a special room as CA Room.One person hold the key of the CA room , and the other one hold the key of the CA Computer.
Current status of CA operationCurrent status of CA operationThe following events have been recorded and
archived: ▶Request for certificates▶Issue certificates ▶Request for revocation ▶Issue CRLs ▶Login/Logout/Reboot event of the CA
machine ▶All notifications are sent by the CA ▶Logs for data exchange between CA and
RA• Archives are stored in a safe box, the offline
media. Only RA and CA Operators can access the box.
Current status of CA operationCurrent status of CA operation
• Current applications▶EUChinaGrid Project▶EGEE Project▶LCG Project▶CMS Project▶ATLAS Project▶BES Project
Current status of CA operationCurrent status of CA operation
• Staff structure
RA Operator CA Operator
AuthenticationAccept request,
communicate with CAIssue certificate
Private keymanagement
helpdesk
SecurityOfficer
StatisticStatistic
Number of issued certificatesNumber of issued certificates
Last update: Apr 15 15:14:47 2009 GMT
User Certificate
Host Certificate
Service Certificate
Total
VALID 81 94 0 175
REVOKED
94 84 1 179
EXPIRED 168 176 6 350
IHEP PKU HKU BUAA NJNU CERN RSGS
CNIC TSINGHUA
CCNU SDU NNU NJU USTC
CooperationCooperation OrganizationsOrganizations
Update statusUpdate status
• Due to the maintenance of the power supply of IHEP computing center, IHEP CA website had been unavailable from Nov/15/2008 07:00(CST) to Nov/17/2008 18:00(CST).
• The new removable hard disk replaced the old one.
ThanksThanks
Thank you!