RenewGridCert

How to renew the grid certificante

computing

From the email:

"The Grid User certificate issued to CERN\johnda will expire in 7 days, on 09/08/2019.

Certificate details:

Serial number: 2a638ff000000006b35c Distinguished name: CN=John Alison, CN=664447, CN=johnda, OU=Users, OU=Organic Units, DC=cern, DC=ch"

Steps:

  1. Go to https://ca.cern.ch/ca/.
  2. Click "New Grid User Certificate"
  3. put in pwd ( XD3Ehht7YhxLmp7g2BhKVb )
  4. download certificante
  5. got myCertificate.p12

Now follow instructions here: https://twiki.cern.ch/twiki/bin/view/CMSPublic/WorkBookStartingGrid#ObtainingCert

  1. move the file to the globus directory
  2. remove old cert and key: rm usercert.pem = =rm userkey.pem
  3. openssl pkcs12 -in myCertificate.p12 -clcerts -nokeys -out usercert.pem [Have to give password]
  4. openssl pkcs12 -in myCertificate.p12 -nocerts -out userkey.pem Have to give cert pwd Then create/veriffiy PEM pasa phrase (asd…)
  5. > chmod 400 userkey.pem > chmod 400 usercert.pem
  1. Copy them to lxplus, LPC, and falcon.
  2. then open Mac Keychain Access App (Got this by searching spotlight for keychain access)
  3. Drag and drop myCertificate.p12 to file list under tab "My Certificates"
  4. then clicked on the new entry (get info) and set it to always trust
  5. I then deleted the certificiate that was going to expire.

Backlinks