Developing and Deploying a PKI for Academia

Higher Education Bridge Certificate Authority (HEBCA) Project Progress July 2004 Dartmouth PKI Summit HEBCA Project What is it? The HEBCA Project being undertaken by Dartmouth College includes all activities related to the instantiation and operation of a production-level Public Key Infrastructure (PKI) Bridge Certificate Authority for the Higher Education community. The project also includes the set up and

facilitation of a test bed for development of bridge aware application software. 2 HEBCA Project What will it provide? The HEBCA Project will create and maintain three new Certificate Authority (CA) systems for EDUCAUSE and will also house the existing HEBCA Prototype CA The three CA systems to be created are: HEBCA Test CA HEBCA Development CA

HEBCA Production CA The HEBCAs will be used to cross-certify Higher Education PKI trust anchors to create a bridged trust network The HEBCA Test CA will also be cross-certified with the Prototype FBCA (other emerging Bridge CAs are also targets) and the HEBCA production CAs will be cross-certified with the production FBCA. 3 HEBCA Project What will it look like?

4 HEBCA Project Whats been done so far? Prototype HEBCA operational and cross-certified with the Prototype FBCA Draft of Production HEBCA CP produced Draft of Production HEBCA CPS started Operational Authority Contractor engaged Preliminary Project Schedule produced Draft MOA with commercial vendor for CA software and licenses

Draft MOA with commercial vendor for infrastructure hardware Analysis phase underway 5 HEBCA Project Projected Milestones Analysis phase complete by 9/2/04 Design phase complete by 11/18/04 CPS complete by 9/24/04 RPS complete by 10/19/04

Deployment phase complete by 6/20/05 Prototype developed and operation by 12/15/04 HEBCA Development CA operational by 3/11/05 HEBCA Test CA operational by 3/21/05 Including cross-certification with FBCA Cross-certify Existing HE Domain CAs with Test CA by 4/4/05 HEBCA Production CA operational by 6/6/05 Including cross-certification with FBCA Start HE Domain CAs cross-certification with HEBCA Production CA by 6/13/05

Post Operation Start Activities Other Bridge cross-certifications Improvements to system Improved Test bed for Bridge-aware applications 6 HEBCA Project 7 For More Information HEBCA Website:

http://webteam.educause.edu/hebca/ Scott Rea - [email protected] Steve Worona - [email protected] 8