Voms Users Procedures.

Updated on 29th May 2015

Below are details of voms and VOMS-admin procedures that users may wish to follow.

Grid users renewing their personal certificates

If both certificate identity (DN) and Certification Authority (CA) of your new certificate remain the same then no action is necessary at the VO. (so feel free to skip the rest of this document smile

However, in case any of the DN or CA have changed, you must register the new identity in your VO(s) to maintain access to the Grid. For example, your certificate identity will change if -

  • you move and get a certificate from a different Certification Authority (CA)
  • your CA changes the format of your certificate Subject (or DN)
  • your CA changes its own (the Issuer) certificate Subject (or DN)

In this case, you should follow the instructions to get your new certificate registered.

Instructions for users

You will have to register your new certificate. Note that now it's possible to add certificates to existing users, so there's no need to do a full registration.

In case your old certificate is still valid and loaded into your browser, you can do it yourself.

The procedure is:

  1. Go to voms-admin and select your VO
  2. Find you record using the search field. Then, click in 'More info'.
  3. Scroll down to 'Certificates' and click in 'Add certificate'.
  4. Fill the form with your new DN and CA (or alternatively, upload your public certificate)
  5. That's all!

On the other hand, if your old certificate is expired you won't be able to access voms-admin. In this case, you should e-mail your VO-admins to add the certificatefor you. To do this, please, send an email to project-lcg-vo-<vo-name>-admin@cern.ch (e.g. project-lcg-vo-cms-admin@cernNOSPAMPLEASE.ch) stating your name and affiliation plus the DN and CA of your new certificate.

-- SteveTraylen - 04-May-2011

Topic attachments
I Attachment History Action Size Date Who Comment
PNGpng vomsnewcert.png r1 manage 41.7 K 2011-05-04 - 10:33 SteveTraylen Flow chart for renewing certificate.
Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r4 - 2015-05-29 - AlbertoRodriguezPeon
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LCG All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback