Certificate Security For Users Obtaining and Using Your Personal Certificate using the OSG PKI Kyle Gross – OSG Operations Support Lead Elizabeth Prout & Alain Deximo – OSG Operations
March 14, 2013 OSG PKI Overview Replaces the need for the DOEGrids PKI Requests go through OIM: Approved by Registration Authorities and Grid Admins in various VOs and domains 2
March 14, 2013 Obtaining the OSG PKI CA Certificate curity/PKIInstallingCA curity/PKIInstallingCA “To import the CA certificates into your browser, download both the Root and CA-1 PEM format files and then go into the Certificate Manager of your browser and use the Import function. Make sure your import these certificates as Authorities.”RootCA-1 3
March 14, 2013 OIM – Requesting Your First Cert 4
March 14, 2013 OIM – Requesting Your First Cert 5
March 14, 2013 OIM – Requesting Your First Cert 6
March 14, 2013 OIM – Retrieving Your First Cert 7
March 14, 2013 OIM – Retrieving Your First Cert 8
March 14, 2013 Importing Your Certificate 9
March 14, 2013 Importing Your Certificate 10
March 14, 2013 Importing Your Certificate 11
March 14, 2013 Authentication With Your Certificate 12
March 14, 2013 OSG PKI User Documentation 13
March 14, 2013 OSG PKI User Documentation Web Interface: n/CertificateGetWeb n/CertificateGetWeb All OSG PKI Info: curity/PKIDocumentationIndex curity/PKIDocumentationIndex 14
March 14, 2013 Switching from DOEGrids to OSG PKI March 23, 2013 – DOEGrids stops issuing certificates DOEGrids certs still function, but won’t be renewed. Authenticate to OIM with your DOEGrids certificate and request a DigiCert certificate. Automatically associated with your OIM account. Most people will be ready to go, some OSG Staff will need manual intervention from GOC 15
March 14, 2013 Making The Switch 16
March 14, 2013 Making The Switch 17
March 14, 2013 If You Have Problems… Contact the Grid Operations Center! Phone: For Security issues, support is 24x7x