Participants:

Linda Cornwall - STFC UKRI
Alessandro Paolini
Matthew Viljoen
Pinja Koskinen
Jan Astalos
Baptiste Grenier
Catalin Condurache
Adrian Coveney - STFC UKRI
Greg Corbett - STFC UKRI
Valeria Ardizzone
David Cohen
Oxana Smirnova
Cyril L'Orphelin (CC-IN2P3/CNRS)

Apologies:
Jerome Pansanel
Dave Kelsey
Emir Imamagic


====================
Introduction
Matthew Viljoen
====================

report about EGI-ACE and EOSC Future (generally positive feedback)

NGI Liaison Meetings in progress
useful inputs received



=================
Security report
Pinja Koskinen, Linda Cornwall
=================

no new incidents since last OMB (April)

some work to improve security dashboard: created new APIs interfacing with pakiti

8 Vulnerabilities reported (1 critical)

SVG
About the new procedure discussed at last OMB
some changes made during CSIRT F2F
most announcements about vulnerabilities are public, need to tell the sites quickly


Question: at what point the procedure should be endorsed by OMB?

need to apply the changes and then it can be endorsed (even by email is ok)



===========================================
Decommission of X509 personal certificates
Valeria Ardizzone (EGI.eu)
===========================================
(topic also discussed at the Operations Meeting, e.g. https://confluence.egi.eu/display/EGIBG/2022-06-20+notes)


an update about the plan to migrate from X509 Personal Certificate to tokens

planning an hackathon event between middleware product teams and Check-in to test the compliance with AARC profile token and fix any issues

do we need to consider also EGI Core Services and Thematic services with regards this migration?

The core services in general are already integrated with Check-in
For the Accounting, the schema should remain the same, and the mapping is not expected to change

A lot of communities adopted Dirac whose integration with Check-in is ongoing, waiting for the release

Is this work alligned with IAM?

IAM is another AAI service which supports WLCG tokens

=============================================
Next bidding phase for the EGI Core Services (EOSc Procurement work)
Matthew Viljoen (EGI.eu)
=============================================

(the slides are TLP: confidential, that is why there are not uploaded in the agenda)

EGI Federation involved in several projects currently running: EGI-ACe, EOSC future, Eosc Synergy, Expands, and others

Tender for the next phase starting in September

set-up of an EGI Procurement Team

to arrange a number of working sessions to prepare the next bidding



===============================
AoB
================================

EGI Conference 2022 - https://indico.egi.eu/event/5882/
19 - 23 Sept