User Certificate Application
User Certificate Application
Guide
Mason Hsiung
• Visit http://ca.grid.sinica.edu.tw , start to request
your user certificate
• Have a look at the requesting flow
• Read the Certificate Policy and Certificate Practice
Statement
• Fill the ASGCCA User Application Form
You can decide to
join EUAsia VO
here.
RA Signs
Here
• Interview with a local Registration Authority(RA)
– RA will verify your identity and sign on the application form.
– If you have problem on finding a local RA, please contact us directly.
([email protected] )
• Fax this signed application form by either RA or yourself.
– Then send a email to [email protected] after the faxing.
• Start to request the certificate
– Create the Certificate Signing Request(CSR)
• Fill this form to send the Certificate Signing
Request
• Next, ASGCCA will send a confirmation to your
email address.
• Confirm your application by clicking this URL.
• Once your user certificate is issued, you will receive an
email to tell you how to import the issued certificate.
• Once your user certificate is issued, you will receive an
email to tell you how to import the issued certificate.
• Export your user certificate.
• Export your user certificate from Firefox.
– Open ‘Preferences’ -> ‘Advanced’ -> ‘Encryption’
• Export your user certificate from Firefox.
– Your Certificates -> Backup
• Export your user certificate from Firefox.
– Select the backup location.
• Export your user certificate from Firefox.
– Set the certificate backup password
• Convert your user certificate for the use of GRID
• Extract the ‘usercert.pem’ and ‘userkey.pem’ from certificate backup
using ‘openssl’
– Open the terminal
$ cd ~/.globus
$ openssl pkcs12 -in xxxx.pfx(p12) -clcerts -nokeys -out usercert.pem
$ openssl pkcs12 -in xxxx.pfx(p12) -nocerts -out userkey.pem
$ chmod 644 usercert.pem
$ chmod 400 userkey.pem