Start by following the instructions at http://www.doegrids.org/pages/cert-request.html, part of which is included below.

After exporting the certificate from your browser, use these commands to get the public and private keys.

• To get the encrypted public key :

  openssl pkcs12 -in YourCert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem

• To get the encrypted private key :

  openssl pkcs12 -in YourCert.p12 -nocerts -out $HOME/.globus/userkey.pem

• Set correct permissions on the private key.

  chmod go-rw $HOME/.globus/userkey.pem