Certificate Setup for Swestore

From SNIC Documentation
Revision as of 08:24, 17 October 2019 by Niklas Edmundsson (HPC2N) (talk | contribs) (Break out cert info from main Swestore page)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search


Introduction

Certificate authentication is needed in some special cases, and more convenient for use in automation (ie. Robot certificates).

Some communities require certificate authentication and such users might already have a certificate, that certificate is likely good to use with Swestore.

This pages describes the procedures to acquire a certificate (if needed), how to reformat the certificate for use with various tools and finally how to make Swestore aware that you have a certificate.

Acquire an eScience client certificate

If you already have a valid grid or eScience certificate you don't need to acquire another one.

Acquire a certificate by following the Requesting a certificate instruction step only on the certificate documentation page. This step can be performed while waiting for the storage application to be approved.

Manage your eScience client certificate

There are multiple suppliers of certificates. Depending on the supplier this step varies a bit.

For Digicert certificates
If intending to access Swestore from a SNIC resource, please make sure you also export the certificate, transfer it to the intended SNIC resource and prepare it for use with grid tools.
For Nordugrid certificates
Please make sure to also install your client certificate in your browser.

Register your eScience client certificate in SUPR

You have to register the certificate in SUPR for Swestore to be aware of it. Make sure your certificate is stored in your browser, log in to SUPR , click Personal Information in the left menu, click Register Client Certificate and follow the instructions. Please wait for up to 10 minutes for this information to be distributed to Swestore.