Grid Certificates

If you need a grid certificate, you can obtain one through the UK Certificate Authority Portal:

https://portal.ca.grid-support.ac.uk/caportal/

The portal includes a link to the CA helpdesk, which provides help and advice regarding obtaining and managing your certificate. John Watt in IT Services is the local Registration Authority (RA), and can provide support with this process; you will also need to visit John to show identification when you first request a certificate. PPE IT support can also provide some assistance with this process.

PKCS#12 to PEM

Once you have obtained your certificate, you will be able to export it from your web browser as a PKCS#12 file, usually with the .p12 extension. arcproxy is able to use credentials in this format, but other tools may require you to extract your certificate and private key from the PKCS#12 file in PEM format. You can do this using the following commands:

openssl pkcs12 -in <P12_FILENAME> -out usercert.pem -clcerts -nokeys
openssl pkcs12 -in <P12_FILENAME> -out userkey.pem -nocerts -nodes