Obtaining a Grid Certificate and Registration in ILCDirac

Obtain a Grid Certificate

Get a grid certificate from your preferred certification authority. At CERN (for staff and users) that is https://ca.cern.ch/ca/?template=ee2user. Go to New Grid User Certificate See your local grid expert (there is usually at least one GRID user in every lab nowadays) for the name of the certification authority corresponding to your institute.

Register to the Virtual Organisation

Then, depending on your VO, either go to




or both to register yourself as a VO member.

Register to ILCDirac

Note: The SPAMNOT part has to be removed from the email addresses

Once you have been allowed in the VO, you need to send a mail to ilcdirac-register@cernNOSPAMPLEASE.ch stating your name, institute, corresponding contact (supervisor is usually enough) and project you are working on. We need this for security reasons. Then we will register you in ILCDIRAC as a user, and add you to the ilc-dirac@cernNOSPAMPLEASE.ch mailing list, and send you a confirmation mail. In the process, you will get a directory in the File Catalog, see below.

After that, you are permanently a member of ILCDIRAC, except if you wish to leave or if you change your certification authority (when you change lab) in which case this registration procedure has to be done again, but is simpler as we only need to change your DN in ILCDIRAC registration. For that, send a mail to ilcdirac-register@cernNOSPAMPLEASE.ch announcing you changed your affiliation to another lab and we will update your details.

Use your Certificate to Obtain a DIRAC proxy

Convert Certificate for DIRAC

Once registered in the VO and in DIRAC, you need to create the pem files. For this, export your certificate from your browser in p12 format. How to do this is documented in the HeadFirstTalk slides. This p12 will need to be converted. The DIRAC installation comes with a handy script to convert the p12 in pem format. To get this script, you need either to see the Installing DIRAC section up to the dirac-proxy-init -x or source the bashrc file from your existing local DIRAC installation. Then run

dirac-cert-convert.sh cert.p12 

where cert.p12 is the file you obtained from the browser export.

Obtain a Dirac Proxy

To obtain the proper dirac proxy run

dirac-proxy-init -g group
Where group depends on the VO you joined or want to use: either ilc_user or calice_user for example.

-- AndreSailer - 21 Feb 2014: Moved from DiracForUsers

Edit | Attach | Watch | Print version | History: r12 < r11 < r10 < r9 < r8 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r11 - 2016-10-25 - AndreSailer
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    CLIC All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2022 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback