rcauth.eu

What It Is

RCauth.eu is a white-label Research and Collaboration Authentication CA service designed for European research and collaboration scenarios. At its core is the RCauth Pilot ICA G1 CA: after users authenticate through a federated identity management system operated by an eligible Registration Authority, the service issues end-user PKIX certificates. These certificates are used for cross-organizational access to distributed resources in science, research, and innovation contexts, and are explicitly limited to academic, research, and similar non-commercial, non-competitive use cases.

Core Capabilities and Deployment

In terms of protection category, this is not a traditional firewall, EDR, or vulnerability management product. Instead, it is infrastructure for identity authentication, certificate issuance, and credential delegation. End users cannot apply for certificates directly from RCauth.eu; they must obtain them through a pre-vetted Credential Management Service, Master Portal, or Token Translation Service. This helps with centralized governance, but also raises the integration threshold. The available materials indicate that it provides ICA certificates, CRLs, policies, governance information, privacy statements, administrator guides, Ansible scripts, source builds, and developer documentation, making it easier for research infrastructure teams to integrate.

Compliance, Integration, and Management

On the compliance side, the site explicitly states that its policy is recognized by IGTF as a DOGWOOD/IOTA trust anchor. For identity sources and organizations, it also involves REFEDS Research and Scholarship and the Sirtfi security incident response framework. Integration capabilities mainly revolve around FIMS/IdP, eduGAIN, Master Portal, MyProxy, OAuth for MyProxy, and CILogon-like architectures, making it suitable for teams that already operate research identity federations and grid/distributed computing infrastructure. For management, it provides certificate revocation lists and policy documents, but there is no clear description of alerting, audit reports, or SLA commitments.

Pricing, Pros, and Cons

The main content does not disclose pricing, payment methods, or commercial plans. Its strengths are a clearly defined research-focused positioning, a relatively complete trust and policy framework, and good alignment with the AARC/CILogon/MyProxy ecosystem. Its drawbacks are that its scope is very narrow, end users depend on portals, and organizations must meet multiple identity and security requirements. It is not directly suited to general enterprise certificate management or zero-trust access projects.

Who It’s For and Access from China

RCauth.eu is better suited to European or international research infrastructure, university/research institution IdPs, research portals, and e-Infrastructure service operators. The source text does not state how well it can be accessed from China, so this remains unknown; payment methods are also not disclosed. For deployment in Chinese research networks, teams would typically need to evaluate local identity federations, institution-run CAs, commercial CAs, or zero-trust identity access products as alternatives or supplements.