Difference between revisions of "Requesting a grid certificate using the Digicert SSO Portal"

From SNIC Documentation
Jump to: navigation, search
(Use bold to highlight specific facts, instead of the entire line.)
(Clarify caveat, add proper sections, split up export/prepare and mention os keystore.)
Line 4: Line 4:
 
[[Category:Swestore user guide]]
 
[[Category:Swestore user guide]]
 
[[Grid_certificates|< Grid certificates]]
 
[[Grid_certificates|< Grid certificates]]
 +
 +
= Caveat =
  
 
Due to brain damage at Google, '''you can no longer use Google Chromium''' for getting a Digicert certificate. '''Firefox still works, and possibly Safari and Internet Explorer'''. We have reports that '''Microsoft Edge does not work'''.
 
Due to brain damage at Google, '''you can no longer use Google Chromium''' for getting a Digicert certificate. '''Firefox still works, and possibly Safari and Internet Explorer'''. We have reports that '''Microsoft Edge does not work'''.
  
To request a Digicert grid certificate
+
= Requesting a Digicert eScience (grid) certificate =
  
 +
# Start the Firefox web browser (see Caveat above)
 
#Go to  https://digicert.com/sso
 
#Go to  https://digicert.com/sso
 
#Type the first characters of your university (or similar) and then select the Identity Provider to use for login.
 
#Type the first characters of your university (or similar) and then select the Identity Provider to use for login.
Line 19: Line 22:
 
#Your certificate is generated and should be automatically imported into your browser.
 
#Your certificate is generated and should be automatically imported into your browser.
  
=== Exporting the Digicert certificate for use with Swestore and other grid tools ===
+
 
 +
= Exporting the Digicert certificate =
 +
 
 +
If you need to use the certificate with other programs it needs to be exported to a file and imported where appropriate.
 +
 
 +
See [[Exporting a client certificate]] for detailed instructions on how to export a Digicert certificate from the most popular browsers.
 +
 
 +
= Adding certificate to OS keystore =
 +
 
 +
For operating systems with a built in keystore the certificate needs to be imported in order to be available for programs that uses it.
 +
 
 +
Mac OS: In Finder, click on the file containing the exported certificate. '''FIXME: Write proper instruction page '''
 +
 
 +
Windows: '''FIXME: Investigate and update instructions accordingly'''.
 +
 
 +
= Using the certificate with grid tools =
  
 
To use the Digicert certificates with the ARC grid client they have to be exported from the browser into a file and then converted into a suitable format.
 
To use the Digicert certificates with the ARC grid client they have to be exported from the browser into a file and then converted into a suitable format.
  
See [[Exporting a client certificate]] for detailed instructions on how to export a Digicert certificate from the most popular browsers.
+
See [[Preparing a client certificate]] for detailed instructions on how to prepare an exported certificate for use with grid tools.
  
See [[Preparing a client certificate]] for detailed instructions on how to prepare the exported certificate for use with grid tools.
+
For operating systems with a built in keystore you might need to export the e

Revision as of 14:00, 10 January 2017

< Grid certificates

Caveat

Due to brain damage at Google, you can no longer use Google Chromium for getting a Digicert certificate. Firefox still works, and possibly Safari and Internet Explorer. We have reports that Microsoft Edge does not work.

Requesting a Digicert eScience (grid) certificate

  1. Start the Firefox web browser (see Caveat above)
  2. Go to https://digicert.com/sso
  3. Type the first characters of your university (or similar) and then select the Identity Provider to use for login.
    File:Digicert-idp.png
  4. Login at your home university.
  5. Select the Grid Premium product.
    File:Digicert-product-select.png
  6. Normally, leave the CSR field blank to get a key generated in your browser.
  7. Press "Request Certificate".
  8. Your certificate is generated and should be automatically imported into your browser.


Exporting the Digicert certificate

If you need to use the certificate with other programs it needs to be exported to a file and imported where appropriate.

See Exporting a client certificate for detailed instructions on how to export a Digicert certificate from the most popular browsers.

Adding certificate to OS keystore

For operating systems with a built in keystore the certificate needs to be imported in order to be available for programs that uses it.

Mac OS: In Finder, click on the file containing the exported certificate. FIXME: Write proper instruction page

Windows: FIXME: Investigate and update instructions accordingly.

Using the certificate with grid tools

To use the Digicert certificates with the ARC grid client they have to be exported from the browser into a file and then converted into a suitable format.

See Preparing a client certificate for detailed instructions on how to prepare an exported certificate for use with grid tools.

For operating systems with a built in keystore you might need to export the e