Trust anchors for GENI aggregates

This page lists various trust anchors which GENI aggregates can use. There's a section for the authorities that the GPO recommends for all GENI aggregates, and a second section for authorities which some aggregates may want to trust in unusual circumstances.

A note on certificate types:

  • A self-signed SA certificate can be added to an aggregate's list of trusted certificates by itself --- it contains everything the aggregate needs in order to trust that slice authority
  • Trusting the self-signed CA certificate for the GENI clearinghouse should be all that is needed to complete the chain to the clearinghouse's trust root.
  • An SA certificate which was signed by a self-signed CA certificate requires the inclusion of both the SA and the CA certificates.

Recommended GENI slice authorities

As of May 2015, the GPO recommends that all GENI aggregates trust the following GENI slice authorities (aka "the GENI cert bundle"), allowing the users at those SAs to use resources at GENI racks, GENI backbone and regional networks, etc.

The table below includes links to the certificate file for each trust anchor.

Description Hostname Certificate type Certificate Expiration File/Checksum
GENI Clearinghouse CA (self-signed) 2023-10-22 01a0938e74de99fb01e6a2c5b803679a
GENI Slice Authority(SA) N/A CA (self-signed) 2023-10-22 0bac62615d5c6df2408629b3a1881222
GENI Member Authority(MA) N/A CA (self-signed) 2023-10-22 f17373fb37329629ba325f5850c23fda
Utah ProtoGENI CA (self-signed) 2026-03-20 de6e43cbc2276eade81398330eb0c4a2
Utah ProtoGENI SA N/A SA (signed by Utah CA) 2026-03-18 5b806b4456f543805d60c70411dff4c6
Fed4FIRE/imec authority / CA (self-signed) 2119-12-31 72e6804aa1f336eab556e64dd1742abc

You can also download the entire bundle as a compressed tar file. The md5sum for the .tar.gz file itself is 35ac48083d324ee352c32f0c0f3c72b0 . Refer to aggregate-specific instructions for how to configure your aggregate to trust a particular certificate.

Last modified 3 years ago Last modified on 10/27/20 16:56:38

Attachments (10)

Download all attachments as: .zip