Obtaining a personal grid certificate

  1. Save the mail with the signed certificate as $HOME/.globus/usercert.pem and make sure that the userkey.pem file in that directory contains the pricate key that matches this certificate. As these *.pem files are strictly personal, their permissions should be set properly by the following command:
    > chmod 600 *.pem
  2. Load the certificate into your web browser. See e.g. http://ca.dutchgrid.nl/info/browser for instructions. Installation can also be done using the jGridstart tool (see above) for supported browsers.
  3. Apply for authorization to use LOFAR resources:
  4. NB If appropriate, you may be interested in applying for membership of other communities, e.g.:

Notes on jGridStart usage

  • It's possible that on OSX Lion or Mountain Lion the jGridStart does not work. This is due to the java support for OSX moving from Apple to Oracle directly. To fix this check the following article http://support.apple.com/kb/HT5559 to get javaws on the commandline so you can use it like this: > javaws http://ca.dutchgrid.nl/start/jgridstart.jnlp. You can also download the latest java for OSX from Oracle and open /System/Library/CoreServices after that to update your CoreServices (you will just see a new Finder window, nothing seems to happen).
  • Sometimes the “install into browser” mode of the jGridStart doesn't work properly. In that case you can have jGridStart generate a .p12 file and import that into your browser manually. This seems openssl related as generating the .p12 with openssl on the commandline also seems to fail if this happens.
  • Last modified: 2017-03-08 15:27
  • (external edit)