Brian Bockelman: transition from the OSG CA
- Update host certs before May 1, plenty of lead time.
- If you're curious about your host certs and expirations, send Bockelman an email.
- Options:
- InCommon: university owns contract; someone in U needs to sign for you; less OSG CA support. Approximately 13 month lifetime for cert
- Let's Encrypt: WebCA. Can be renewed via cron job. Will take some time to get accredited internationally.
- Will work: Submission to CE, gridFTP/phedex.
- Will NOT work: production / AAA federation. Cannot export data to random clients.
- Sites affected: UMD, PR, Colorado
- User certs: still use CERN CA
- Can contact mailing list about which solution you already have.
- Let's Encrypt: data stored locally can be used at US T3, might not work with Euro T3. Phedex to Europe might also be an issue. User to user may also have issues.
Can contact admin@incommon.org to find your RAO?