Presentation on theme: "User Certificate Application Guide Mason Hsiung. Visit start to request your user certificatehttp://ca.grid.sinica.edu.tw."— Presentation transcript:
User Certificate Application Guide Mason Hsiung
Visit http://ca.grid.sinica.edu.tw, start to request your user certificatehttp://ca.grid.sinica.edu.tw
Have a look at the requesting flow
Read the Certificate Policy and Certificate Practice Statement
Fill the ASGCCA User Application Form
RA Signs Here You can decide to join EUAsia VO here.
Interview with a local Registration Authority(RA) – RA will verify your identity and sign on the application form. – If you have problem on finding a local RA, please contact us directly. (firstname.lastname@example.org )email@example.com
Fax this signed application form by either RA or yourself. – Then send a email to firstname.lastname@example.org after the email@example.com
Start to request the certificate – Create the Certificate Signing Request(CSR)
Fill this form to send the Certificate Signing Request
Next, ASGCCA will send a confirmation to your email address.
Confirm your application by clicking this URL.
Once your user certificate is issued, you will receive an email to tell you how to import the issued certificate.
Export your user certificate.
Export your user certificate from Firefox. – Open ‘Preferences’ -> ‘Advanced’ -> ‘Encryption’
Export your user certificate from Firefox. – Your Certificates -> Backup
Export your user certificate from Firefox. – Select the backup location.
Export your user certificate from Firefox. – Set the certificate backup password
Convert your user certificate for the use of GRID
Extract the ‘usercert.pem’ and ‘userkey.pem’ from certificate backup using ‘openssl’ – Open the terminal $ cd ~/.globus $ openssl pkcs12 -in xxxx.pfx(p12) -clcerts -nokeys -out usercert.pem $ openssl pkcs12 -in xxxx.pfx(p12) -nocerts -out userkey.pem $ chmod 644 usercert.pem $ chmod 400 userkey.pem Certificate backup password The password for protecting private key
Join EUAsia VO, please visit https://vomrs.grid.sinica.edu.tw:8443/vomrs/euasia/vomrs – Click Registration (Phase 1) and fill the form of registration.
Confirm the email address and finish registration – You will receive a confirmation email.
Clicking the link in the email will bring you to the Registration (Phase II) Read, agree and click to register
Registration (Phase II) DONE, waiting for the approval of the VO administrator via email.
The email of the approval notification, you are now the member of EUAsia VO.