GridCertificates < IT

---+ Grid Certificates

If you need a grid certificate, you can obtain one through the UK Certificate Authority Portal:

[[https://portal.ca.grid-support.ac.uk/caportal/]]

The portal includes a link to the CA helpdesk, which provides help and advice regarding obtaining and managing your certificate.  [[http://www.gla.ac.uk/stafflist/?action=person&id=4cd4e8e78a92][John Watt]] in IT Services is the local Registration Authority (RA), and can provide support with this process; you will also need to visit John to show identification when you first request a certificate.  [[ITManagement#PPE_IT_Support][PPE IT support]] can also provide some assistance with this process.

---++ PKCS#12 to PEM

Once you have obtained your certificate, you will be able to export it from your web browser as a PKCS#12 file, usually with the =.p12= extension.  =arcproxy= is able to use credentials in this format, but other tools may require you to extract your certificate and private key from the PKCS#12 file in PEM format.  You can do this using the following commands:

<pre>
openssl pkcs12 -in &lt;P12_FILENAME&gt; -out usercert.pem -clcerts -nokeys
openssl pkcs12 -in &lt;P12_FILENAME&gt; -out userkey.pem -nocerts -nodes
</pre>
This topic: IT > WebHome > GridCertificates
Topic revision: r3 - 2018-04-16 - GordonStewart