1. Certificate Security For Users Obtaining and Using Your Personal Certificate using the OSG PKI Kyle Gross – OSG Operations Support Lead Elizabeth Prout & Alain Deximo – OSG Operations

2. March 14, 2013 OSG PKI Overview Replaces the need for the DOEGrids PKI Requests go through OIM: https://oim.opensciencegrid.org/ https://oim.opensciencegrid.org/ Approved by Registration Authorities and Grid Admins in various VOs and domains 2

3. March 14, 2013 Obtaining the OSG PKI CA Certificate https://www.opensciencegrid.org/bin/view/Se curity/PKIInstallingCA https://www.opensciencegrid.org/bin/view/Se curity/PKIInstallingCA “To import the CA certificates into your browser, download both the Root and CA-1 PEM format files and then go into the Certificate Manager of your browser and use the Import function. Make sure your import these certificates as Authorities.”RootCA-1 3

4. March 14, 2013 OIM – Requesting Your First Cert 4

5. March 14, 2013 OIM – Requesting Your First Cert 5

6. March 14, 2013 OIM – Requesting Your First Cert 6

7. March 14, 2013 OIM – Retrieving Your First Cert 7

8. March 14, 2013 OIM – Retrieving Your First Cert 8

9. March 14, 2013 Importing Your Certificate 9

10. March 14, 2013 Importing Your Certificate 10

11. March 14, 2013 Importing Your Certificate 11

12. March 14, 2013 Authentication With Your Certificate 12

13. March 14, 2013 OSG PKI User Documentation 13

14. March 14, 2013 OSG PKI User Documentation http://oim.grid.iu.edu/oim/certificate Web Interface: https://twiki.grid.iu.edu/bin/view/Documentatio n/CertificateGetWeb https://twiki.grid.iu.edu/bin/view/Documentatio n/CertificateGetWeb All OSG PKI Info: https://www.opensciencegrid.org/bin/view/Se curity/PKIDocumentationIndex https://www.opensciencegrid.org/bin/view/Se curity/PKIDocumentationIndex 14

15. March 14, 2013 Switching from DOEGrids to OSG PKI March 23, 2013 – DOEGrids stops issuing certificates DOEGrids certs still function, but won’t be renewed. Authenticate to OIM with your DOEGrids certificate and request a DigiCert certificate. Automatically associated with your OIM account. Most people will be ready to go, some OSG Staff will need manual intervention from GOC 15

16. March 14, 2013 Making The Switch 16

17. March 14, 2013 Making The Switch 17

18. March 14, 2013 If You Have Problems… Contact the Grid Operations Center! Email: goc@opensciencegrid.orggoc@opensciencegrid.org Phone: +1 317 278-9699 For Security issues, support is 24x7x365. 18