Reply to Which Certificate Authority Should LIGO Use?

Document #:

LIGO-T0810038-x0

Document type:

T - Technical notes

Abstract:

During two teleconferences and exchanges of emails
the authors, along with Michael Helm and Dhiva
Muruganantham from Energy Sciences Network (ESnet)
and John Volmer from the DOEGrids Certificate
Authority (CA) Policy Management Authority,
discussed technical, organizational, and
operational issues around the question of which
certificate authority the LIGO project should use
and what role ESnet staff and resources, including
the DOEGrids CA, might play in the LIGO
authentication and authorization infrastructure.
The discussions were enormously helpful in
clarifying the technical ramifications of the LIGO
use case requirements and led to a fuller
exploration of the solution space than would have
otherwise happened. The authors conclude that the LIGO use
case requirements, aimed at significantly reducing
the burden on LIGO scientists and users, make it
difficult to architect a solution that involves
ESnet in general and the DOEGrids CA in
particular. The most appealing solution identified
that meets the LIGO use case requirements is for
LIGO to operate its own short lived credential
services (SLCS) with deployments located at the
major LIGO Data Grid (LDG) sites to meet the
requirements for robustness against network
outages.

Files in Document:

None

Topics:

• Computing/archiving

Authors:

• Scott Koranda

Keywords:

certificate authority