Resources on CREN CA Web Site

1. PKI-LITE Policies and Certificate Profiles

2. CREN's Strategic and Practical FAQ Series
   • FAQ: Institutional Directories and Repositories (pdf) (2001) [Members Only]
   • FAQ: Digital Certificate Infrastructure (pdf) (2000)
   • FAQ: CREN's Certificate Authority Service (1999)
     [First FAQ on Institutional certificate service]

3. Getting Started with Digital Certificates Guide
   Prepared November 2001 for CREN/Mellon Workshop on Exploring Access to External Content Providers: brings key information for a pilot into one place.

4. Digital Certificates: What Are They, and What Are They Doing in My Browser?
   This is a pre-publication copy of an article published in the August 2002 issue of Syllabus You can also visit the Syllabus site for the above article and other interesting Syllabus articles.
   [Download: Microsoft Word or PDF Format]

5. Resource Pointers
   Prepared for External Access Seminar participants: a reading list of papers, FAQ's and web sites related to digital certificates and external access on campus.

6. Preparing for PKI on your campus: Protecting a Private Key in a CA Context
   Framework draft by Jeff Schiller from October 2000

7. Archives from the CREN Seminars, workshops, .....
   • Digital Certificate Expanded Pilot Meeting
   • Minnesota PKI & Directories Seminar
   • Washington DC PKI & Directories Seminar

8. CREN TECH TALKS
   These links will open in a new browser window. Some links on the pages will take you outside of this part of the CREN website, with no link back. Close the new window to return to the CREN CA website.
   • Digital Certificates on Campus
     With Jeff Schiller (4/13/00)
   • Building Directories: The Fundamentals
     With Ken Klingenstein and Keith Hazelton (2/17/00)
   • Digital Certificates and Identification of Users on Campuses
     With David Wasley (2/11/99)
   • Authenticating Users? What are the Issues?
     With Greg Jackson (11/5/98)
   • Certificate Authority Services
     With Jeff Schiller (10/08/98)
   • Middleware - Authentication, Authorization, and Directory Issues
     With Ken Klingenstein (6/3/98)
   • Privacy, Security and Handling Academic Business
     With Mark Bruhn (5/27/98)
   • The Future of Network Security
     With Mark Bruhn (3/11/98)
   • Network Security
     With Mark Bruhn (11/4/97)

Certificate Authority Community Links

1. Higher Education PKI (HEPKI) Links
   www.internet2.edu
   • Middleware Directories
     General background and overview of technical and policy issues with links to working groups and individuals conferring on intra and inter-institutional Issues and developing common standards for the Higher Education Community.
   • Authorization
     Learn about some of the challenges associated with authorization.
   • Certificates and PKI
     Learn about the challenges of using X.509 certificates to address a number of network computing needs in higher education.

2. EDUCAUSE PKI Resources
   www.educause.edu
   • Higher Education Bridge Certificate Authority (HEBCA)
     EDUCAUSE is pilot testing a PKI bridge, The Higher Education Bridge, that will allow colleges and universities to recognize and trust each other's signatures in real time. Three Institutions have successfully signed grant applications with NIH using HEBCA.

   • Related Topic: Federal Bridge Certificate Authority (FBCA)
     FBCA is being developed to support PKI operations among Federal agency PKI domains.

   • Higher Education PKI (HEPKI) Activity Groups
     The HEPKI-TAG Activity Group is investigating the technical issues related to the deployment of PKI in Higher Education with links to work in progress, PKI-LITE developments, HPKI-TAG recommendations and reference documents.

   • Click on Policy Activities Group (HEPKI_PAG): Overview of and comparison of various institutional policies regarding certificates.

3. Higher Education Institutions
   • University of Michigan - KX.509 Kerberos Leveraged PKI by Bill Doster
     Kerberos Leveraged PKI (K-PKI) leverages an existing Kerberos infrastructure to provide a lightweight Public Key Infrastructure (PKI).
4. Vendors
   • Chrysalis-ITS � Intranet Offer for CREN members
   • Understanding PKI by VeriSign
   • Public Key Cryptography Standards (PKCS) by RSA Securities

CREN Pilot Resources (2001)

1. Princeton Scenario
2. MIT Scenario
3. Georgia Tech Scenario
4. University of Tennessee Scenario
5. University of Minnesota Scenario
6. Pilot Resource Scenario Archives

Books and Reading Material

1. Digital Certificates: Applied Internet Security
   By Jalal Feghhi, Peter Williams, Jalil Feghhi
   
   • Digital Certificates: Applied Internet Security
     By Jalal Feghhi, Peter Williams, Jalil Feghhi
   • Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations
     By Carlisle Adams and Steve Lloyd
   • Secure Electronic Commerce: Building the Infrastructure for Digital Signatures and Encryption
     By Warwick Ford and Michael S. Baum
   • Understanding Digital Signatures: Establishing Trust Over the Internet and Other Networks
     By Gail L. Grant
   • Web Security and Commerce
     By Simson Garfinkel with Gene Spafford
2. This Chronicle of Higher Education article also offers a good introduction to digital certificates.

Presentations

1. 2002 PRESENTATION / Update on CREN CA
   • Common Solutions Group (CSG), January 08, 2002
     www.stonesoup.org
   • Past Meetings
   • January 2002: Meeting presentations on PKI and Certificates

2. 2000 PRESENTATIONS
   • Judith Boettcher: Presentation on Certificate Authority for Higher Education
     Presented to the Trans-European Research and Educational Networking Association (TERENA). October 2000