XSEDE Security
If you suspect a security incident, or if your account has been compromised, please contact the XSEDE Help Desk immediately to report a security incident.
For other security issues, contact security-lead@xsede.org
XSEDE security documents currently available:
- XSEDE Certificate Service (Get an SSL server cert)
- Incommon Federation: Participant Operational Practices
- XSEDE-approved CA certificates, signing policies, and CRL URLs [Download] [PGP signature(s) for download]
- XSEDE Security Working Group Charter
- XSEDE Security Playbook
- XSEDE Central Services Baseline Security Standard
- XSEDE Science Gateway Security Policy & Guideline
- XSEDE Acceptable Use Policy
- XSEDE Privacy Policy
- XSEDE Resources SSH Keys
- XSEDE Level1 Service Provider Security Agreement
-
XSEDE Security Working Group Service Provider (SP) Guide & FAQ
Here is a list of currently accepted CAs and their contact information:
| CA Wepage | CA Contact | XSEDE Trusted subject DN's |
|---|---|---|
| CILogon | ca@cilogon.org | "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Silver CA 1" |
| DFN-GridGermany-Root | dfnpca@dfn-cert.de | "/C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01" |
| DigiCert | support@DigiCert.com | "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA " "/C=US/O=DigiCert Grid/OU=www.digicert.com/CN=DigiCert Grid Trust CA" "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1" "/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA" |
| DOEGrids | ESnet-Root-CA-1@es.net | "/DC=org/DC=DOEGrids/OU=Certificate Authorities/CN=DOEGrids CA 1" |
| ESnet | ESnet-Root-CA-1@es.net | "/DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1" |
| InCommon | help@xsede.org | "/C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA" "/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority" "/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root" |
| IRISGrid | pkirisgrid-ca@rediris.es | "/DC=es/DC=irisgrid/CN=IRISGridCA" |
| NCSA | ca-admin@ncsa.uiuc.edu | "/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=MyProxy" "/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=Two Factor CA 2013" "/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=CACL" "/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=Two Factor CA" "/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=MyProxy CA 2013" |
| SDSC | certman@sdsc.edu | "/C=US/O=SDSC/OU=SDSC-CA/CN=Certificate Authority/UID=certman" |
| PSC | ca-admin@psc.edu | "/C=US/O=Pittsburgh Supercomputing Center/CN=PSC Root CA" "/C=US/O=Pittsburgh Supercomputing Center/CN=PSC Hosts CA" "/C=US/O=Pittsburgh Supercomputing Center/CN=PSC MyProxy CA" |
| UK e-Science | ca-manager@grid-support.ac.uk | "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A" "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B" "/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root" |
| INFN (Italy) | infn-ca@fi.infn.it | "/C=IT/O=INFN/CN=INFN CA" |
| NIKHEF (Dutch Grid) | ca@dutchgrid.nl | "/C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth" |
| NERSC | certs@nersc.gov | "/DC=net/DC=ES/OU=Certificate Authorities/CN=NERSC Online CA" |
| KEK | Takashi.Sasaki@kek.jp | "/C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority" |
| NICS | security@nics.tennessee.edu | "/DC=EDU/DC=TENNESSEE/DC=NICS/O=National Institute for Computational Sciences/CN=MyProxy" |
