Difference between revisions of "Requesting a grid certificate using the Digicert SSO Portal"

From SNIC Documentation
Jump to: navigation, search
m (Adding certificate to OS certificate store)
(Digicert no longer available. Redirecting to the Sectigo page.)
(21 intermediate revisions by 3 users not shown)
Line 1: Line 1:
[[Category:Grid computing]]
+
#REDIRECT [[Requesting a grid certificate using the Sectigo SSO Portal]]
[[Category:SweGrid user guide]]
 
[[Category:Swestore]]
 
[[Category:Swestore user guide]]
 
[[Grid_certificates|< Grid certificates]]
 
 
 
= Caveat =
 
 
 
Due to brain damage at Google, '''you can no longer use Google Chrome/Chromium''' for getting a Digicert certificate. '''Firefox, Safari and Internet Explorer still works'''. We have reports that '''Microsoft Edge does not work'''.
 
 
 
= Requesting a Digicert eScience (grid) certificate =
 
 
 
# Start a suitable web browser (see Caveat above for details):
 
## Windows:
 
### Internet Explorer
 
### Firefox (does not use OS certificate store, obtained certificate is only available to Firefox)
 
## macOS:
 
### Safari
 
### Firefox (does not use OS Keychain, obtained certificate is only available to Firefox)
 
## Linux/Unix:
 
### Firefox (obtained certificate is only available  to Firefox)
 
#Go to  https://digicert.com/sso
 
#Type the first characters of your university (or similar) and then select the Identity Provider to use for login.
 
#:[[File:Digicert-idp.png]]
 
#Login at your home university.
 
#Select the ''Grid Premium'' product.
 
#:[[File:Digicert-product-select.png]]
 
#Normally, leave the CSR field blank to get a key generated in your browser.
 
#Press "Request Certificate".
 
#Your certificate is generated and should be automatically imported into your browser.
 
 
 
= Exporting the Digicert certificate =
 
 
 
If you need to use the certificate with other programs it needs to be exported to a file and imported where appropriate.
 
 
 
See [[Exporting a client certificate]] for detailed instructions on how to export a Digicert certificate from the most popular browsers.
 
 
 
= Adding certificate to OS certificate store =
 
 
 
Some operating systems have a built in keychain/keystore. If Firefox was used the certificate needs to be imported to keychain/keystore in order to be available for other programs.
 
 
 
* [[Add client certificate to keychain on macOS]]
 
 
 
Windows: '''FIXME: Investigate and update instructions accordingly'''.
 
 
 
= Using the certificate with grid tools =
 
 
 
To use the Digicert certificates with the ARC grid client they have to be exported from the browser into a file and then converted into a suitable format.
 
 
 
See [[Preparing a client certificate]] for detailed instructions on how to prepare an exported certificate for use with grid tools.
 
 
 
For operating systems with a built in keystore you might need to export the e
 

Revision as of 07:21, 19 October 2020