UK HEP Testbed CA
This CA has been replaced by the UK e-Science Certification Authority
Introduction
The UK HEP Testbed CA provides Globus x509 certificates for the UK HEP Testbed community. The CA is located at RAL. All certificates issued will expire after one year.
To apply for a certificate from the UK HEP Testbed CA, you need access to a system that has Globus configured to the UK HEP settings (see below). To get a certificate issue the command grid-cert-request and follow the instructions produced. To find out which system to use, contact your local systems administrator.
Deployment of the New CA
It is planned to start using certificates from a new CA being run by the Grid Support Centre at CLRC for use by all UK Grid projects. This is currently under testing. GridPP will start to use it once it moves into production but you can try the new interface and give feedback if you wish. See http://ca.grid-support.ac.uk/user-documentation/ for details.
A timeline is available for this deployment, as well as initial drafts of user and RA-operator interim procedure guidelines.
Scope
- The certificate identifies the individual as a member of the UK HEP Grid Testbed. The CA will issue a certificate to anyone working on the UK HEP GRID Testbed (provided they can properly identify themselves).
- The certificates are for use only on GRID testbeds.
- The certificate implies nothing about authorisation to use any computing resource. It is up to individual system managers to decide if an individual should be authorised to use their system.
Configuring the CA into your Globus Client/Server
A standard Globus installation is configured to make certificate requests to the Globus CA and only trust certificates signed by the Globus CA. Installations of Globus version 1 or version 2 can be configured to use certificates signed by the UK HEP CA. Details of how to perform this configuration are available from the following links:-
- Configuring a Globus version 1 installation to use the UK HEP CA
- Configuring a Globus version 2 installation to use the UK HEP CA
Revocation
A revokation list may be found at http://www.hep.grid.ac.uk/ca/ca-crl.pem it will be updated promptly if a certificate is revoked.
Last modified Wed 26 November 2003 . View page history
Switch to HTTPS . Website Help . Print View . Built with GridSite 1.4.3