Seminar Outline: Introduction to PKI and Its Applications in Higher Education
Dartmouth PKI Summit, 7/13/2004

12:30 Opportunity to set up participant's laptop computers (all)

• see document "Workshop Notes" for what software versions are required
• Mac users install Mozilla and setup for mail account if desired
• download from www.mozilla.org  or load from CDs we have prepared

1:00 Introduction to PKI and its applications in higher education (slides) (Bob)

• Establish terminology keys and certificates, how crypto operations are used, motivation for PKI
• present  slides "PKI_Seminar_Intro.ppt"

1:30 Certificates (Mark)

• Introduction to certificates
• Obtaining a certificate
• get a GT Papyrus certificate (detailed instructions)
• (for IE either need altered CA or export/import keys to make Greenpass work, check status with Chris)
• import GT root certificate (not required on Windows), check fingerprint

2:00 Key stores, private key protection (using new certs) (Mark)

• Introduction to key stores
• Certificate store IE and Mozilla
• Personal and root certificates
• Certificate settings and key passwords

2:20 Network authentication with PKI and mobility (Bob)

• participants use Papyrus cert to connect to https://descolada.dartmouth.edu/cgi-bin/env.pl
• have to select cert and provide password
• displays certificate contents and server environment information

• live demo of production Dartmouth applications:
• software downloads
• library
• BlackBoard
• Tuckstreams
• VPN

2:40 Digital signatures (Mark)

• Introduction to digital signatures
• (Windows only) participants use their own certs to:
• sign a word document (http://www.dartmouth.edu/~pkilab/pages/office.signing.overview.html)
• email a signed document to your neighbor
• extra credit: sign another MS-Office document type (excel,
• demo acrobat document signing (Bob)
• http://www.dartmouth.edu/~pkilab/pages/acrobat.signing.html

3:00 Break

3:15 S/MIME email (Mark)

• Introduction to S/MIME
• Hands on demo, participants send each other signed email
• Mozilla/Thunderbird
• Outlook
• Possible demo of encrypted email (time permitting)

4:00 SYMPA email list manager (Bob)

• http://www.dartmouth.edu/~pkilab/pages/Using_SYMPA_Mail_Lists.html
• connect to SYMPA web page with cert  https://lists.dartmouth.edu/wws
• join list
• load certificate for list
• send signed and encrypted mail to list

4:20 Greenpass demo (Chris, Bob, Punch) (using Papyrus certs)

• Introduction slides
  
• Overview of activities (details)
  
• Connect to "GreenPass Test" SSID, introduce yourself
• Get a delegation
• Configure wireless network for "Dartmouth User" SSID and WPA
• Connect to "Dartmouth User" SSID
  

5:00 Survey of issues to consider when deploying PKI (slides) (Mark)

• Outsource vs. run your own CA
• Private key protection for CA
• Escrow of private encryption keys
• Publishing certificates
• CRLs: what they are and options
• Policies and practices

5:30 Adjourn