Registering your new certificate with CMS VOMS

In order to access grid resources, you must register your new certificate with CMS VOMS. Follow the steps below.

  1. Before you register your new certificate, you should first find out about what existing roles and groups you are a member of. You will perform this step with your old certificate that is already registered in CMS VOMS. When you register your new certificate, you will make a request to join the same groups/roles. Go to https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/SetMbrGroupsAndGroupRoles&action=execute. Carefully make a list of all the groups/roles you have. We will use this list later when you finish registering your certificate.
    Screen_shot_2013-02-18_at_1.20.05_PM.png
  2. Before you register your new certificate, please find out who is your VOMS representative, ie. the person approves your membership and group and role privileges. Go to Membership Info tab on VOMRS web site, which is https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction&action=expand. Click on Rep DN and submit a search. For the example below, the user is Mine Altunay Cheung and her representative is Tony Tiradani. Later when you request roles for your new DN, you will email your representative. It will be either Patrick Gartung gartung AT fnal.gov or Tony Tiradani tiradani AT fnal.gov. For now just make a note of who your representative is.
Screen_shot_2013-02-19_at_11.34.56_AM.png
  1. Please enter your new DN in the "New DN" box. You should also select the CA that issued your new DN from the list of CAs. The following screen shows what end user needs to do (NB: in this case, the DN for the new certificate was issued by the DigiCerts CA, and the DigiCerts CA was selected from the drop-down menu).
    Screen_shot_2012-11-20_at_2.37.25_PM.png
  2. Click submit. VOMS-Admin needs to approve your request to add your new certificate to the VOMS.
  3. You will receive a new email when that happens.
  4. With your newly registered cert loaded in your browser, go to https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/SetMbrGroupsAndGroupRoles&action=execute one more time. Unlike the screenshot in Step1, you will not have any approved groups/roles associated with this certificates. Select the group and role you want to be a member of, and then click submit button at the left bottom corner of the screen.
  5. Email your VOMS representative that you found out in Step 2, and notify him that you requested roles for your new certificate.
  6. Your group/role requests should be approved by the VOMS Administrator. You will receive an email when that happens. If you do not hear form the VOMS admins, then open a GGUS ticket.
Edit | Attach | Watch | Print version | History: r7 | r5 < r4 < r3 < r2 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r3 - 2013-02-19 - MineAltunayCheung
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    CMSPublic All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback