Agenda & Notes 7-24-2007

Agenda

Meeting notes are in blue.

1. Certificate Revocation procedures.
   • Review minutes from last meeting Agenda & Notes 7-17-2007 (especially Frank's follow-up responses in green).
   • Review Joyce's draft procedures with agreed changes from last meeting.
   • Are we OK with putting these procedures into production after the training session?

     • Add to the procedures that unless the user can tell you which certificate to revoke when multiple certificates are shown in TAS that the default action is to revoke all certificates. This applies to walk-in and phone-in revocations alike.

     • Pending StuTel approval, this committee approved these procedures for implementation following the September 5, 2007 training session.

2. PKI/PDC websites strategy
   • Review minutes from last meeting Agenda & Notes 7-17-2007
   • Review latest draft on the eProv development server http://www.dev.pki.vt.edu/pdc/new_index.html
   • Are these pages ready to be moved to production?

     • SETI Testing and Deployment (TAD) will send some suggested changed to Jack Noll regarding the separate instructions for Mozilla and Firefox.

     • Suggested changes from this team to Jack Noll for the dev website.

       1. Remove the Enrollment, Download & Installation, and Browser Configuration tabs at the top of all windows, as this information is available from other screens.

       2. Change this text "Follow the instructions for the combination of operating system and browser that you will be using. Note that not all browsers support the use of PDCs." on this page with the matrix https://secure.hosting.vt.edu/www.dev.pki.vt.edu/pdc/new_Matrix.html to "Verify that you have an operating system and internet browser that supports the use of your eToken and Personal Digital Certificate. Click on the appropriate check mark provided in the following matrix to download and install the Aladdin Run Time Environment (RTE) on each computer you plan to use with your eToken and personal digital certificate." which is what is on the current production website http://www.pki.vt.edu/pdc/.

       3. On the pdctest sign page https://ash.eprov.seti.vt.edu/pdctest/ change this text at the top of the page "Click here to digitally sign the sample leave report" to "Insert token and click here to digitally sign the sample leave report".

          • We also discussed adding to the test sign page, https://ash.eprov.seti.vt.edu/pdctest/ some text about an available, free plug-in for Mac's to allow display of the test pdf file in their browser window, so they would not have to open it in a separate window. Doug will send a URL for the plug and some suggested text to add to the page.

   • Discuss a high-level strategy for the PKI web site.
     • What really needs to be on a web site vs. what is in computing.vt.edu vs. KB articles?
3. Linux survey update.
   • Review minutes from last meeting Agenda & Notes 7-17-2007
   • A copy of the survey questions are here.
   • Need summary of results and then a decision on committing resources towards Linux eToken support.
4. Audit update.
5. Other.
   • Greg is out next Tuesday, July 31st. Meet or cancel?

     • Mary will decide next week based on her workload.