History
SETI is operating the PDC (Personal Digital Certificate) project. A component of this is the Smartcard/Token Selection Committee. The initial charge for the group was to determine the security device to be used by all IT employees to sign time sheets in the initial phase of the PDC project. The group selected the Aladdin eTokens we already had on hand from a previous pilot.
While making the above selection, the Security Token Working Group (STWG) was formed composed of many interested parties from inside and outside of IT. A subset of the STWG ("members") made the recommendation above. The other participants
were "advisory members".
Next Phases
The university would like to deploy smart cards to all employees. The time sheet signing application will be expanded to all employees at that time. It will be necessary to purchase smart cards for all employees and the Smartcard/Token Selection Committee is charged with this selection. The actual recommendation will most likely come from a subset of the STWG. The details of that process are undetermined at this time.
The STWG will expand and become more active. Its activities will be more widely focused than the committee and will provide input to the committee.
STWG Summary
- Involve other groups within the university that are or plan to use smart cards. Find out what they're doing and see what support or advice IT can provide.
- Expand smart card use beyond the requirements of the PDC project e.g. ssh login, encryption, etc.
- Provide input to other committees of the PDC project or PMA on the requirements of users (maybe unrelated to smart cards, e.g. soft certs, smart cards issued to vendors or other outsiders, use of VT certificates on smart cards issued by departments, etc.)
The STWG is intended to be a informal technical group. It has no particular authority or charge.