The first phase of the project will involve participants who are familiar with PKI and will focus on client interoperability issues, certificates and certificate management, and documentation. Phase 1 is designed to support both the use of certificates issued by campus Certification Authorities (CAs) and by users of several open CAs that have been made available for the project. The open CAs enable participation by institutions that do not presently have PKI systems under development. The second phase of the project will add users who are not generally familiar with PKI and also increase the project scope to include both user-to-user and user-to-application S/MIME interactions.

NOTE WELL: All Internet2 Activities are governed by the Internet2 Intellectual Property Framework.

• Outline of the Project Requirements document (draft)

• Supported S/MIME email clients feature table (draft)

• Institutions participating in the S/MIME project.
  Email kjk@internet2.edu if you would like to participate in this activity.

• PKI Lite
  The idea behind PKI-lite is that one of the barriers to faster deployment of PKI may be the relatively intense policy, user identity verification, and practices framework typically associated with a full-featured PKI. PKI-lite recognizes that many useful applications can be supported using a PKI based on a relatively simple certificate profile and a policy framework similar to how we presently operate most existing campus central authentication services.
  
  • PKI-lite Draft Project Assumptions
  • PKI-lite End Entity Certificate Profile
  • PKI-lite CA Certificate Profile
  • PKI-lite Draft Certificate Policy & Practices    (Word format)

  • PKI-lite Institutional Root Certificate download site
    Download organizational and/or institutional root certificatates for groups participating in HEPKI activities. Please email your institutional root certificate(s) to participate.