Difference between revisions of "Storing your grid certificate on an Aladdin eToken"

From PDP/Grid Wiki
Jump to navigationJump to search
 
Line 1: Line 1:
−
pkcs11-tool --module /usr/local/lib/libetpkcs11.so -r bla -y bla
+
=How to store your existing grid certificate on an Aladdin eToken=
 +
 
 +
To store your existing grid certificate (<tt>usercert.pem</tt> and <tt>userkey.pem</tt> files) use the following commands
 +
 
 +
* Convert your public certificate to DER format
 +
  openssl x509 -in ~/.globus/usercert.pem -out usercert.der -outform der
 +
* Load your public certificate on the eToken (you must use your user PIN to do this):
 +
  # pkcs11-tool --module /usr/local/lib/libetpkcs11.so -w usercert.der --type cert --label "Jan Just Keijser" --id 1234 --login
 +
  Please enter User PIN:
 +
  Generated certificate:
 +
  Certificate Object, type = X.509 cert
 +
    label:      Jan Just Keijser
 +
    ID:        1234
 +
* Load your private key on the eToken (you must use your user PIN to do this):

Revision as of 15:30, 23 April 2007

How to store your existing grid certificate on an Aladdin eToken

To store your existing grid certificate (usercert.pem and userkey.pem files) use the following commands

  • Convert your public certificate to DER format
 openssl x509 -in ~/.globus/usercert.pem -out usercert.der -outform der
  • Load your public certificate on the eToken (you must use your user PIN to do this):
 # pkcs11-tool --module /usr/local/lib/libetpkcs11.so -w usercert.der --type cert --label "Jan Just Keijser" --id 1234 --login
 Please enter User PIN:
 Generated certificate:
 Certificate Object, type = X.509 cert
   label:      Jan Just Keijser
   ID:         1234
  • Load your private key on the eToken (you must use your user PIN to do this):
Retrieved from "https://wiki.nikhef.nl/grid/index.php?title=Storing_your_grid_certificate_on_an_Aladdin_eToken&oldid=759"