Renewing DOEGrid Certificate

From Research IT

Jump to: navigation, search

Your DOEGrid certificate will expire after one year. You will receive automatic email notices from doegrids-ca-1@doegrids.org. Follow the instuctions in the email to renew your grid certificate

To renew it, Select "Replacement Certificate" under "Subscriber Enrollment" here: https://pki1.doegrids.org:443

If you recieve an error "Secure connection Failed" click on "Add an Exception" , click on "Get Security Exception" and then click on "Confirm Security Exception site.


Once you select Replacement certificate you need to select your key length, Select "High Grade"

A certificate will then be imported into your browser.

The next step is to Export/Backup your new certificate to cert.pfx, log on to hermes.rit.albany.edu and copy this certificate to your home directory. 

[ew2193@grid ~]$ chmod 600 $HOME/.globus/userkey.pem
[ew2193@grid ~]$ source /network/rit/misc/grid/setup.csh
[ew2193@grid ~]$ openssl pkcs12 -in cert.pfx -clcerts -nokeys -out $HOME/.globus/usercert.pem
[ew2193@grid ~]$ openssl pkcs12 -in cert.pfx -nocerts -out $HOME/.globus/userkey.pem
[ew2193@grid ~]$ chmod 400 $HOME/.globus/userkey.pem
[ew2193@grid ~]$ grid-proxy-init
Retrieved from "http://www.rit.albany.edu/wiki/Renewing_DOEGrid_Certificate"
Personal tools