Digital Certificates HUIT IT Security May 24 2012

Digital Certificates HUIT IT Security | May 24 2012

Agenda: • Why are we meeting? • What have we learned? • HUIT Digital Certificates • Q&A/Demo

May 24 2012 Why? When we last spoke in September 2011, we discussed specific Best Practices and Hardening tips for Web Servers. HUIT IT Security | Digital Certificates 3

May 24 2012 Why? To restate the problem: The web continues to be the defacto platform for content delivery, sometimes insecurely. Web applications are now a dominant focus for attackers. HUIT IT Security | Digital Certificates 4

May 24 2012 What have we learned? Mandating SSL/TLS is not enough HUIT IT Security | Digital Certificates 5

May 24 2012 What have we learned? Fund Security initiatives HUIT IT Security | Digital Certificates 6

May 24 2012 The HUIT Digital Certificate Service Certificate Management • • Administration Provisioning Revocation Reporting HUIT IT Security | Digital Certificates 7

May 24 2012 The HUIT Digital Certificate Service Certificate Availability • Delegation • Multi-site • Other uses HUIT IT Security | Digital Certificates 8

May 24 2012 The HUIT Digital Certificate Service Using this program, any domain associated with a Harvard school or institute may obtain SSL certificates for no fee. In JUNE for existing NOC Portal customers More on our i. Site HUIT Security | Digital Certificates 9

May 24 2012 Demo and Q & A Image goes here HUIT Security | Digital Certificates 10

Sep 30 2011 IT Security Contact Info • ithelp@harvard. edu • Helpdesk at x 57777 • Use the i. Site These slides will be on http: //security. harvard. edu HUIT IT Security | Digital Certificates 11

Thank you. Esmond Kane | Digital Certificates May 24 2012