Request a certificate for user from Belnet

(Use the same computer and webbrowser for all this process)

1/ The request in Belnet

• Prepare your request on the following URL:
  https://gridra.belnet.be/pub/csr-fh.cgi

Choose User - UCL.

Click on Next

Enter your data as follow:

Key size: 2048 (High Grade)
Common Name: Your Name (No accented characters!)
Organizational Unit: UCL
Organizational Unit: PHYS
E-Mail: You mail

Click on Send

Next screen will review your personnal informations. Click OK if everything is correct.

After verification of your identity by CA (tipically 1 or 2 working days), a mail will be sent to you that states the certificate issuing process has been completed, it is reported a serial number that must be used in the following steps.


• Get your certificate from the CA on:
  https://gridra.belnet.be/pub/getcert.html

Fill the form with your serial number and select the appropriate type for this number. Click on Continue and the certificate will be automatically installed on your browser. A master passwd will be asked in order to manage the certificates installed on your browser. See:
Mozilla: Edit >> Preferences >> Privacy & Security >> Certificates >> Manage Certificates
Firefox: Edit >> Preferences >> Advanced >> Security >> View Certificate


• Test your certificate on:
  https://gridra.belnet.be/cgi-bin/pub/pki?cmd=test_cert

In order to test if your certificate is valid, after receiving the confirmation e-mail that you process is successfully terminated, just try the test on the above URL. Your Master passwd will be asked and you will receive the confirmation that your certificate is valid.

2/ Register in a VO

• CMS:
https://lcg-voms.cern.ch:8443/vo/cms/vomrs

Before starting the process, you need to have a valid certificate loaded in your browser.
In the above URL, choose one of the listed VO's (ex: CMS).
On the left, click on Registration (Phase I). Follow the procedure Phase after Phase. In the first one, for the representative, you may choose Scabia.


• becms-t2:
https://bdii.iihe.ac.be:8443/voms/becms-t2/webui/request/user/create

3/ How to use your certificate with grid-proxy-init

• To use a Certificate in Globus, you need to convert it to PEM format Key pair.:
Select your certificate in your browser:
Mozilla: Edit >> Preferences >> Privacy & Security >> Certificates >> Manage Certificates
Firefox: Edit >> Preferences >> Advanced >> Security >> View Certificate

Push the backup button in order to create a .p12 file on your disk. After, you just have to convert the file to PEM format using:
openssl pkcs12 -in cert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in cert.p12 -nocerts -out userkey.pem

Finally, protect the created files using...
chmod 644 usercert.pem
chmod 400 userkey.pem

... and move the files into the correct directory.
mkdir -p $HOME/.globus
mv *.pem $HOME/.globus/.