...
This subsection modified from https://fermi.service-now.com/kb_view.do?sysparm_article=KB0010815
If you will be using Globus tools to run grid jobs from a Linux or other UNIX machines, you need to get a proxy certificate. To do so, your certificate and user key need to be in PEM format. To convert them from their original PKCS#12 format to PEM:
- Export your Open Science Grid certificate from your browser.
- Use the scp utility to copy the certificate to your detsim account, then ssh into detsim to perform the rest of these steps.
No Format scp /path/to/<YourCert>.p12 USERNAME@detsim.fnal.gov:~/ ssh USERNAME@detsim.fnal.gov
- Convert the certificate using the openssl command as shown (use your actual .p12 certificate filename with no angle brackets; use the output name usercert.pem as shown). (You may have to create the $HOME/.globus directory)
No Format openssl pkcs12 -in <YourCert>.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
- To get the encrypted private key (again use your actual .pl2 certificate filename; use the output name userkey.pem as shown):
No Format openssl pkcs12 -in <YourCert>.p12 -nocerts -out $HOME/.globus/userkey.pem
- You must set the mode on your userkey.pem file to read/write only by the owner, otherwise grid-proxy-init will not use it
No Format chmod go-rw $HOME/.globus/userkey.pem
Setup the Grid Tools
Setup the grid tools in a bash shell.
| No Format |
|---|
source /fnal/ups/grid/setup.sh |
Setup the grid tools in tcsh or csh.
...
Session Certificate and quotas
...