DOE Certificate

How to request a DOEGrids Personal Certificate?

• How to request a DOEGrids Personal Certificate?
• Personal certificate request form
• Exporting your key pair for use by Globus grid-proxy-init

 o Export or 'backup' your certificate. The interface for this varies from browser to browser.
 
  - Internet Explorer starts with "Tools -> Internet Options -> Content". 
  - Netscape Communicator has a "Security" button on the top menu bar. 
  - Mozilla starts with "Edit -> Preferences -> Privacy and Security -> Certificates". 
  - The exported file will probably have the extension .p12 or .pfx.
   
 o Guard this file carefully. Store it off your computer, or remove it once you are finished with this process.
 o Copy the above PKCS#12 file to the computer where you will run grid-proxy-init.
 o Extract your certificate (which contains the public key) and the private key:
 o Certificate: openssl pkcs12 -in YourCert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
 o To get the encrypted private key : 
  - openssl pkcs12 -in YourCert.p12 -nocerts -out $HOME/.globus/userkey.pem 
   You must set the mode on your userkey.pem file to read/write only by the owner, 
   otherwise grid-proxy-init will not use it(chmod go-rw $HOME/.globus/userkey.pem).