Macedonian Academic Research Grid Initiative

Create user certificate request

User Certificate Request

To generate a certificate request in order to obtain a SEE-GRID CA certificate, you should have a valid user account in one of the User Interface nodes (UI) of SEE-GRID.

 

Use any ssh client to login to a User Interface with your username.If you are using Windows, you can use any SSH compatible terminal emulator like PuTTY.

Upon succesfull login issue the following command:

> grid-cert-request

Important Note: In order to be able to execute this command /opt/globus/bin/ must be in your PATH.

Three output files will be created in the .globus subdirectory of your home directory: 

  • userkey.pem : contains the private key associated with the certificate: it must be kept readable only by the user requesting the certificate. Should this file be lost or deleted, you will have to request a new certificate.
  • usercert-request.pem : contains the request for the user certificate.
  • usercert.pem : should be replaced by the actual certificate when you will receive it signed by MARGI CA.

Email your certificate request (file usercert-request.pem) to the appropriate RA Manager for your institution/organization with Subject:MARGI CA Certificate Request.

Before your certificate is authorised, you must appear in person to the nearby RA in order to verify your identity and the validity of the request. Be prepared to have a valid photo ID document or passport with you. From the time your identity is confirmed, you will receive within 1 working day your MARGI CA Certificate.

The digital certificate signed by MARGI CA that you will recieve will be in PEM format. In order to import it in your mail client or your web browser you must create a pkcs12 bundle. Instructions on how to import your certificate in your browser and how to convert PEM Format to P12 Format can be found at Instructions page.

Within 7 working days from the day that you will receive your MARGI CA certificate, you will have to perform the Acceptance Procedure, which is described in the e-mail in which the certificate was delivered to you.