The LRZ uses the GÉANT/Sectigo-PKI service (https://cert-manager.com/customer/DFN) for server and user certificates and the DFN service ‘DFN-PKI’ (http://www.pki.dfn.de/) for GRID and DFN community certificates, and operates several certification authorities (CA) and registration authorities (RA) within this framework.
Scope of Services and Service Specifics
Based on this infrastructure, the LRZ signs certificates for the following areas of application:
a) Server certificates for LMU and TUM (and organisationally affiliated institutions), provided that the servers are hosted at the LRZ (e.g. VMware instances), or are web servers in the context of web hosting,
b) User certificates for mail signing and encryption, exclusively for members (individuals or groups) of the BAdW,
c) Grid certificates for some of the facilities in the Munich Scientific Network,
d) DFN community certificates for special purposes, which are not browser-anchored but are valid for three years.
In addition, the LRZ provides help and advice on questions and problems relating to the issuing of certificates.