• Created by Unknown User (plgzacz), last modified by Unknown User (plgszopa) on Oct 17, 2016

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Basic information

Certificates are used to confirm users' identity within PLGrid Infrastructure. They allow access to some of PLGrid services without requiring user's login and password. Some applications or tools require a certificate.

You can manage your certificates in Certyfikaty menu.

Two types of certificates are recognized in PLGrid and can be managed in PLGrid portal:

  • Simple CA
  • Polish Grid CA

 

Simple CA certificate

Simple CA certificate is fullly managed at PLGrid portal. It can be issued, downloaded or revoked there. 

Issue Simple CA certificate

You can generate your certificate using the "Wygeneruj certyfikat" button. You will be required to provide your PLGrid password, which becomes your certificate password as well. After providing the password click "Generuj".

After the certificate is generated, it is registered in PLGrid portal. You can download your certificate in p12 format (containing certificate and private key) by using the link "Zapisz certyfikat na dysku". 


Registration of certificate in PLGrid Portal causes it to save in:

  • keyFS - that allows for use of certificate on UI without having to upload it there
  • OpenID - which allows for passing it to web-based services that require a certificate to generate proxy

In the future it will be possible to auto-login to PLGrid's services with the certificate (registration at web browser management will be required).

Revoke Simple CA certificate


There is a possibility to revoke a Simple CA certificate in PLGrid portal.

If your certificate has been compromised you should revoke the current certificate and generate another one.

This is also an option for other circumstances like changing User's personalities or if User no longer needs that kind of authorization.

 

Uwaga

Revoke of certificate has consequences: removing certificate from PLGrid Portal and from all of services. 

 

Renewal of Simple CA

Duration of Simple CA lasts one year. To extending the period of validity for another year User has to revoke current certificate and generate a new one via options described above. A month before due date User gets a notification.

Polish Grid CA certificate

Polish Grid CA issued by Polish Certificate Issuing Department and it recognized in European grid infrastructures. To get this certificate User has to move to website: https://plgrid-ca.pl/ Then User should receive an e-mail with download link. User gets PEM package files. To install it at the web browser or in PLGrid Portal User must convert the files to PKCS12 format.

Installation Polish Grid CA in PLGrid Portal

To Polish Grid CA registration User has to use an option "Załaduj certyfikat z dysku" then fills the package password and key password and send to Portal.

 

 

  • No labels