Introduction

The GRID introduces the concept of a GRID certificate to authenticate users. A GRID certificate is issued by a Certificate Authority (CA) which checks the identity of the user and guarantees that the holder of this certificate is existing and his certificate is valid.

The certificate is used for authentication instead of the user's account to avoid the replication of the user's account to all GRID sites. When authenticating to a site, the user's certificate is mapped to a local account under which all commands are executed.

The certificate itself is not used during the actual GRID usage. All GRID jobs use a proxy of the certificate with a limited lifetime. This enhances security because the user has to re-establish the validty of his certificate after the lifetime of the proxy has ended.

In the following, the application procedure for a GRID certificate and the generation of a proxy is described. The application has to be done once followed by the installation of the certificate in the home directory of the user's account. The proxy generation has to be repeated everytime no valid proxy exists on the user's submission machine.

Application procedure

• Getting Grid Certificate

• To work in Grid Environment the user should have a valid grid certificate signed by recognized grid computing certification authority, as for our country user can apply for certificate to "Indian Grid Certificate Authority (IGCA)"
• Please follow the instruction on (Indian Grid Certificae Authority (IGCA) and apply for certificate.
• Make sure you executed all steps carefully and after recieving the certificate please load it into your internet browser
• Please register yourself with the virtual organization (VO membership) e.g. CMS VO membership

• Getting an account at India-CMS Tier-III at TIFR, Mumbai and T2_IN_TIFR

  • After getting certificate and VO membership, Please send an email with your lxplus username and certificate DN, to all members in this list and your guide or supervisor.
  • You will recieve your account information and machine name in the reply to you email, you will also recieve temporary onetime password which you have change when you login into your account.
  • Configure your account with your grid certificate ( As described in these steps GRIDCredentials)

  Installation of the certificate

  After the successful application, the certificate has to be installed in the user's home directory following these instructions: