View source for User:Wvengen@nikhef.nl/Globus certificates for Users

From PDP/Grid Wiki

← User:Wvengen@nikhef.nl/Globus certificates for Users

You do not have permission to edit this page, for the following reason:

---

You can view and copy the source of this page.

To use a ([http://glite.web.cern.ch/ gLite] or [http://www.globus.org/ Globus]) grid one needs a certificate. This comprises a private key that belongs to the user, and a public certificate that is signed by a certificate authority. While this method is generally seen as secure and scalable, user experience is often not optimal. One of my goals is to make this as seamless as possible to end-users of the grid. ==Security Requirements== There are a couple of security requirements which must be met, as defined in the [http://www.eugridpma.org/guidelines/pkp/ guidelines for protection of private key data]: * The private key must be protected with a passphrase and not publicly accessible. * The private key must be generated using trustworthy cryptographic software. * The private key can only be transferred over secure networks, but it is better to use proxy certificates instead. ==Existing software requirements== All kinds of applications that interact with the grid need to find the user's credentials: * ''Web browsers'' to access protected websites, like the VOMS signup page, job monitors, and protected collaboration areas. * ''gLite/Globus utilities'' to operate on jobs and files on the grid, like <tt>voms-proxy-init</tt> and <tt>glite-wms-job-submit</tt>. * ... ==Operating system support== * Linux ** GTK *** [http://library.gnome.org/devel/gp/stable/ GP11] PKCS#11 *** [http://library.gnome.org/devel/libcryptui/stable/ libcryptui] certificate support * Mac OS X * Windows ==Links== * [[Globus-PKCS11]] THIS PAGE IS A WORK IN PROGRESS

Return to User:Wvengen@nikhef.nl/Globus certificates for Users.