Getting started (Guide to new user joining IndiaCMS)

Application procedure => Registration in CERN Database

Please note the registration procedure:

The person has to first register at Users' office:

The person in charge (for users, Team Leader, Group Leader of the institute and for COAS and VISC the Department Head or an authorized person on his/her behalf) has to initiate the online registration via PRT Tool

Pre-Registration Tool This process replaces the previously used paper registration form.

The following document is mandatory for the pre-registration and need to be attached to the online registration form:

The Home Institution Declaration - HID (Valid for a period of 6 months following the date of signature) HID

Please consult: How to fill in the Home Institution Declaration

The HID must be completed and signed by an authorized representative of the person’s home institution.

A copy of the passport Following the online pre-registration newcomers must send an email to CMS secretariat whereby the process of registration in CMS will start

Getting a CERN account

Step1-

E-mailing the CERN Service Desk at Service-Desk@cern.ch from your external email address (from your university or service provider). Please attach a copy of your identification document (identity card or passport). Once you have contacted the CERN Service Desk, if it is not possible for you to send a copy of your identification document, you can send a copy by fax at the following fax number +41 22 766 84 89 You will recieve an email with the detailed instructions.

Step2-

Once you have the temporary password for your CERN account, use the initial account configuration wizard at here Please do so within 5 days or the account will be deactivated Log in with your login name and the temporary password; Follow the instructions on the screen

How to register in the CMS VO

When in possession of a personal certificate, a CMS user has to register his or her certificate in the CMS Virtual Organisation in order to be authorized to use WLCG resources.

Needed steps are:

1. Make sure you are registered at CERN as a CMS member (VOMS will check it) in CERN's Human Rescource Data Base.

   • Most users can simply verify that they appear in CERN's phonebook and that CMS is indicated as main experiment in there. But there are a few cases in which CERN will not list you in the phonebook even if everything is OK, in this case you want to be sure that both CMS Secreatariat and CERN User's Office have acknowledged your registration.

2. Make sure your web browser is ready and your personal certificate is in it (best it to make sure that it is the only personal certificate).

   • Remember that if you change browser (or computer) it is up to you to import your certificate from one browser to another
   • Registration can only done using your web browser. All major modern browsers should work, but if possible we recommend using Firefox as it is the most tested one.
   • Most CA's give users certificates via web pages, so the certificate is already imported in your browser as part of previous steps, in particular this is the case with CERN certificates. If instead you got your certificate as a file, you need to make sure it is P12 format (contact your national CA if needed) and then load it into your browser (instructions are different for each browser and can be found e.g. via google).

3. Click here to reach the VOMSAdmin server and submit the registration form

   • Documentation on the VOMSAdmin web page(s) is available here

4. After submitting the form, you will get a confirmation email that contains a link that you need to click to confirm your registration. Find the link and click it.

5. Now, you need to wait for final confirmation that will be done by the VO administrators, wait up to a day especially on weekends

6. When they confirm your registration request, you will get a notification email

7. Finally, you can sign up the AUP using the link in that mail, or go directly to here

Note - Most CMS user should not select any group nor role,

Getting Grid Certificate

The GRID introduces the concept of a GRID certificate to authenticate users. A GRID certificate is issued by a Certificate Authority (CA) which checks the identity of the user and guarantees that the holder of this certificate is existing and his certificate is valid.

The certificate is used for authentication instead of the user's account to avoid the replication of the user's account to all GRID sites. When authenticating to a site, the user's certificate is mapped to a local account under which all commands are executed.

The certificate itself is not used during the actual GRID usage. All GRID jobs use a proxy of the certificate with a limited lifetime. This enhances security because the user has to re-establish the validty of his certificate after the lifetime of the proxy has ended.

In the following, the application procedure for a GRID certificate and the generation of a proxy is described. The application has to be done once followed by the installation of the certificate in the home directory of the user's account. The proxy generation has to be repeated everytime no valid proxy exists on the user's submission machine.

To work in Grid Environment the user should have a valid grid certificate signed by recognized grid computing certification authority, as for our country user can apply for certificate to "Indian Grid Certificate Authority (IGCA)"

Please follow the instruction Indian Grid Certificae Authority and apply for certificate.

Make sure you executed all steps

*** Updating certificate ***

If you are already registered in the CMS VO with a different certificate

If you have recently obtained a new certificate but you were already registered in the CMS VO with an old certificate, please read these instructions.

Getting an account at India-CMS Tier-III at TIFR, Mumbai and T2_IN_TIFR

1. After getting certificate and VO membership, Please send an email with your lxplus username and certificate DN, to everyone in this list
2. You will recieve your account information and machine name in the reply to you email, you will also recieve temporary onetime password which you have change when you login into your account.

After you get the Grid Account join us at Matter-most Team and Mattermost channel for latest updates and announcements.

gitlab at TIFR

we have dedicated gitlab services hosted for T2/T3 users with full features. you can signup using tifr or cern email ids with the same username as the one used for T2/T3. signup here at gitlab