+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Wireless Networks Thread, Free SSL Certificates for schools!! in Technical; Janet are providing free SSL certificates to schools - JANET Certificate Service...
  1. #1

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,433
    Thank Post
    368
    Thanked 646 Times in 528 Posts
    Rep Power
    159

    Free SSL Certificates for schools!!

    Janet are providing free SSL certificates to schools - JANET Certificate Service

  2. #2
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Have been trying to push this on others here for a while now

    We have one in use at the moment and will be registering another when we get back.

  3. Thanks to jamesfed from:

    matt40k (29th December 2011)

  4. #3

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,433
    Thank Post
    368
    Thanked 646 Times in 528 Posts
    Rep Power
    159
    I just don't get why people don't use it. I mean when Nominet got paided to give every school a ".sch.uk", I don't get why every school didn't get one, now you can get a free SSL certificate. Let's face it, every schools going to have a VLE or something that needs to be secured in this day and age.

    I think most people forget that ".sch.uk" and Janet certificates are limited to only schools (and other educational institutions) which is a great security benefit. OK, you still going to worry about being hacked, but at least your parents are going to guareetee that your website is actual yours and not the one I setup 5 mins ago with a news article saying the school is closed due to the boiler failure

  5. #4
    robk's Avatar
    Join Date
    Nov 2005
    Location
    Ashbourne
    Posts
    761
    Thank Post
    176
    Thanked 130 Times in 109 Posts
    Blog Entries
    1
    Rep Power
    48
    Can you actually apply for these direct now? I recall some time ago you had to work through your la/ rbc and most seemed to not want the admin work.

  6. #5

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,433
    Thank Post
    368
    Thanked 646 Times in 528 Posts
    Rep Power
    159
    My understanding, your LA registers it's self with Janet certificates and they do it for the whole LA. They get approved, they logon to a simple web interface, they self manage the LA certificates. Doesn't seem much admin work really, it's most liking going to be easier, after all they need the certificate to add to the reverse proxy.

  7. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,725
    Thank Post
    667
    Thanked 1,638 Times in 1,463 Posts
    Rep Power
    424
    The school owns the .sch.uk not the lea though.

    Ben

  8. #7

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,619
    Thank Post
    1,499
    Thanked 1,053 Times in 922 Posts
    Rep Power
    304
    Quote Originally Posted by robk View Post
    Can you actually apply for these direct now? I recall some time ago you had to work through your la/ rbc and most seemed to not want the admin work.
    I am fairly sure from reading the site its still a job for the LA, that being the LAs that are usually to busy to do many things for many and want an admin fee for doing a great number of tasks as well

    JA.Net need to open it up to allow direct requests really, or make it so the LA has to register each school and can then delegate access to the SSL system to each school its approved perhaps.

  9. #8

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,950
    Thank Post
    1,345
    Thanked 1,799 Times in 1,117 Posts
    Blog Entries
    19
    Rep Power
    597
    The school owns the domain (actually, technically Nominet / UK Govt own it but that is just details) but JANET, as the certificate authority, have to provide verification on the domain, which has a cost. At the moment the LA/RBC has to agree to be the verifier and I happily sign off any EMBC connected school (done via Comodo, who are the CA for these certificates). Technically I cannot sign off an Academy on behalf of the LA, but I can as the person managing their connection to the RBC ... so if you are in Northants and want one get in there sooner rather than later.

    As far as I am aware, JANET will only grant the certificate if you are on a JANET / NEN connection and it is only for .sch.uk domains. I have had one or two local schools grumble about this ... but this is a free service ... it will have restrictions / conditions. I have asked who would sign off an Academy which has *nothing* to do with the LA and the response I had was that the RBC could do it instead ... if they are not connected via the RBC then they don't get the certificate (schools connected in via links with local Universities and JANET are the exception here ... but JANET prefer you to use the RBC).

    It is some admin work for the LAs ... and for the number of people who expressed an interest when I raised it locally it was not efficient to do it across the board, so it is done on an ad-hoc basis. In the same way as when a Firewall change is requested a certain amount of documentation is needed ... not for me, but so that the school documents it themselves ... but that is a rant for another day.

  10. #9

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,433
    Thank Post
    368
    Thanked 646 Times in 528 Posts
    Rep Power
    159
    Quote Originally Posted by john View Post
    JA.Net need to open it up to allow direct requests really, or make it so the LA has to register each school and can then delegate access to the SSL system to each school its approved perhaps.
    I don't think they need to, otherwise they would create more work for themselves and thus cost more money, LA's have methods already in place to check that you actually work at a particular school. A school should only ask for 1 certificate anyway, if it needs more then one then they should ask for a wildcard certificate - there is a shortage of IPv4 addresses after all! Personally, it should make the process a whole lot easier.

    @GrumbleDrook - I guess they would get it from the LA\RBC if they're on the network otherwise I guess it's like the census and they go direct (to DfE). How long till we see a National Authority for Academies to deal with the services LA dealt with for schools?

  11. #10

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,950
    Thank Post
    1,345
    Thanked 1,799 Times in 1,117 Posts
    Blog Entries
    19
    Rep Power
    597
    Quote Originally Posted by matt40k View Post
    I don't think they need to, otherwise they would create more work for themselves and thus cost more money, LA's have methods already in place to check that you actually work at a particular school. A school should only ask for 1 certificate anyway, if it needs more then one then they should ask for a wildcard certificate - there is a shortage of IPv4 addresses after all! Personally, it should make the process a whole lot easier.

    @GrumbleDook - I guess they would get it from the LA\RBC if they're on the network otherwise I guess it's like the census and they go direct (to DfE). How long till we see a National Authority for Academies to deal with the services LA dealt with for schools?
    Talking with a number of other LAs ... some just don't have the people they used to have anymore ... and not all schools contribute towards what the LA does ... so the idea that schools should go direct is not that strange an idea. Someone has to pay for the admin at some point. Academies can go direct to their RBCs so there is already that system in place there.

  12. #11

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    Getting a free for edu cert from say IPSCA isn't much hassle i.e. if you can receive for (amongst others) postmaster@<school>.<county>.sch.uk to authenticate the cert request then it just works. What does ja.net add?

  13. #12

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    It's a shame you have to use the .sch domain for most things to be free for edu. Ot was a decision to drop the .sch.UK in favour of a .org.uk address.

  14. #13

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,950
    Thank Post
    1,345
    Thanked 1,799 Times in 1,117 Posts
    Blog Entries
    19
    Rep Power
    597
    There are rules about what you use each TLD for ... I have previously disagreed with folk (including my former Head at my last place) about schools using .com or .co.uk ... foundation / trust / co-operative trust can get away with using .org.uk but not .org ... this is not to say that the other domains should not be registered to protect the school's brand ... but .sch.uk is what it should be by default and the other domains should just be redirections to it.

    And yes ... I know there are folk who vehemently disagree and that schools should be free to choose ...

  15. #14

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,225
    Thank Post
    875
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780
    Quote Originally Posted by GrumbleDook View Post
    There are rules about what you use each TLD for ... I have previously disagreed with folk (including my former Head at my last place) about schools using .com or .co.uk ... foundation / trust / co-operative trust can get away with using .org.uk but not .org ... this is not to say that the other domains should not be registered to protect the school's brand ... but .sch.uk is what it should be by default and the other domains should just be redirections to it.

    And yes ... I know there are folk who vehemently disagree and that schools should be free to choose ...
    I fully agree with you, using .com is a misrepresentation unless you are a for profit entity (diluted from an international for profit entity). Using .com for everything is pandering to the uninformed and/or undereducated.

    IPSCA works fine for here using the frankly retarded (given its epic length) .school.nz or my preffered .ac.nz (academic - which also fits a school).

  16. #15

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,265
    Thank Post
    111
    Thanked 242 Times in 193 Posts
    Blog Entries
    1
    Rep Power
    74
    Not two months before this change JANET told me no way no chance.

    That is annoying. Mind you I'm not sure there is anyone in the LA left to sign off for us.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Free SSL Certificates for JANET connected schools
    By Dos_Box in forum Wireless Networks
    Replies: 25
    Last Post: 29th April 2013, 03:26 PM
  2. SSL Certificates for Exchange 2007
    By jdibsdale in forum Windows
    Replies: 14
    Last Post: 29th May 2009, 06:40 PM
  3. Numu - A free music site for schools
    By Dos_Box in forum Links
    Replies: 1
    Last Post: 27th March 2008, 11:17 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •