User:Wvengen@nikhef.nl/Globus certificates for Users

To use a (gLite or Globus) grid one needs a certificate. This comprises a private key that belongs to the user, and a public certificate that is signed by a certificate authority. While this method is generally seen as secure and scalable, user experience is often not optimal. One of my goals is to make this as seamless as possible to end-users of the grid.

Security Requirements

There are a couple of security requirements which must be met, as defined in the guidelines for protection of private key data:

• The private key must be protected with a passphrase and not publicly accessible.
• The private key must be generated using trustworthy cryptographic software.
• The private key can only be transferred over secure networks, but it is better to use proxy certificates instead.

THIS PAGE IS A WORK IN PROGRESS