Difference between revisions of "Renew Grid Certificate"
Jump to navigation
Jump to search
m |
|||
| (One intermediate revision by one other user not shown) | |||
| Line 6: | Line 6: | ||
2) Use the same password everywhere. You need many. | 2) Use the same password everywhere. You need many. | ||
| + | |||
| + | Of course this is not the safest thing you can do and actually there are only 3 disctinct passwords. If you do this, please be sure to use an EXTREMELY difficult password | ||
| Line 31: | Line 33: | ||
E) Re-sign VO membership thingies (Grid and VO AUP ?) | E) Re-sign VO membership thingies (Grid and VO AUP ?) | ||
https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute | https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute | ||
| + | <i>NB: if you have multiple certificates stored in your browser, use the certificate you created at D) to identify yourself | ||
| + | (otherwise you won't be able to re-sign the AUPs).</i> | ||
Latest revision as of 11:49, 25 April 2008
A shortcut through the maze you enter when you want to renew your GRID certificate and/or if you need to re-sign the ATLAS VO 'I-promise-I-will-behave-on-the-Grid' statement:
Advice:
1) Try to avoid breaking your head trying to understand what all computer/grid terms mean that you encounter.
2) Use the same password everywhere. You need many.
Of course this is not the safest thing you can do and actually there are only 3 disctinct passwords. If you do this, please be sure to use an EXTREMELY difficult password
1) Renewing your Grid Certificate
A) http://ca.dutchgrid.nl/info/rekey.html run script dca-rekey-pack.sh
B) Upload file to Dutch CA to start request
File: $HOME/.globus/newrekeypack.txt
Web-page: http://ra.dutchgrid.nl/ra/public/submit
C) Save the certificate you get back by mail from the Dutch CA (~ 2 days) and follow instructions:
- Save mail as .globus/usercert.pem
- In .globus: mv newkey.pem userkey.pem
2) Resign the ATLAS things and Get Certificate in Browser (Mozilla)
D) Get certificate as PKCS12 format (needed by browsers)
http://lcg.web.cern.ch/LCG/users/registration/load-cert.html
In .globus:
openssl pkcs12 -export -inkey userkey.pem -in usercert.pem -out my_cert.p12 -name MyGridCertificate
E) Re-sign VO membership thingies (Grid and VO AUP ?)
https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute
NB: if you have multiple certificates stored in your browser, use the certificate you created at D) to identify yourself
(otherwise you won't be able to re-sign the AUPs).