The document discusses the TCS eScience Personal Portal, which allows mapping a Feide identity to an X.509 certificate through a simple web portal using an existing browser framework. The portal is operated by the University of Tilburg in the Netherlands as part of a European collaboration utilizing established identity networks. It runs the Confusa software and was developed by UNINETT Sigma and NDGF. The portal is ready for pilot users in December 2009 and provides a low-cost way to obtain certificates via a third-party CA (Comodo).

1. TCS eScience Personal Portal
Henrik Austad
henrik.austad@uninett.no
UNINETT Sigma A/S
October 29, 2009

2. What is “TCS eScience Personal Portal”?
A way to map a Feide identity to an X.509 certificate
• Simple webportal
• Existing and familiar framework (browser)
• Fast
• Third party CA (Comodo)
• Cheap (flat-rate charge)

3. TERENA CA Timescale

4. A European collaboration
• Eurpoean Service
• Utilizing establish
identity networks.
• Several NRENs use
same portal.
• Operated by
University of Tilburg
(NL)

5. The portal itself
• Runs Confusa (v0.3)
• UNINETT Sigma & NDGF main contributing organizations
Sigma coordinates through Henrik.
• Portal ready, accreditation moving forward.
• Ready for pilot users in December.
• “Playground” at https://beta.confusa.org/confusa
(NTNU partially added, others are welcomed to join).

6. The workflow

7. Getting started - what the subscriber must do
Each subscriber must:
• Read the CPS
• Sign contract with
NREN (Feide,
UNINETT).
• Assign
entitlement-attribute
(eduPersonEntitle-
ment)
Requires that the user has undergone
F2F photo-id vetting
• Promote the service
to the users.

8. Open issues
• Under what name should the service be known?
• The best way of adding subscribers (videoconf?)
• Other interesting usecases (than “pure” grid)

9. Demo, links and questions
• Project Home:
http://www.confusa.org/
• Main list:
confusa-dev@confusa.org
• The coming portal:
https://tcs-escience-portal.terena.org/
• “Playground”
https://beta.confusa.org/confusa
• IRC for developers/curious:
#confusa@freenode